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From  CAMPUS 
To  COMPANY 


Forget  about  eye-popping  salaries,  whopping  signing 
bonuses  and  new  cars.  This  year’s  IT  graduates,  such 
as  Neal  Frager  (above),  face  a  much  less  inviting  job 
market  than  their  predecessors  did  just  a  few  years 
ago.  Still,  there  are  steps  that  savvy  job  hunters  can 
take  to  find  the  best  entry-level  positions. 

STORIES  BEGIN  ON  PAGE  26. 


PRIVACY  BILL  CARRIES  HIGH  IT  PRICE 


Could  force  companies 
to  provide  info  access 


BY  PATRICK  THIBODEAU 

WASHINGTON 

A  privacy  bill  that’s  pending  in 
Congress  could  have  signifi¬ 
cant  IT  ramifications  for  U.S. 
companies,  since  passage  of  the 
bill  would  require  them  to  give 
customers  access  to  personal 


information  they  have  collect¬ 
ed.  For  firms  without  central¬ 
ized  databases  of  that  informa¬ 
tion,  compliance  would  likely 
be  expensive,  critics  warn. 

Companies  such  as  Marriott 
International  Inc.  already  have 
to  provide  access  for  their  cus¬ 
tomers  in  Europe,  where  such 
laws  are  on  the  books  now.  If  a 
European  resident  wants  data 
Privacy,  page  63 


ORACLE  COURTS 
SKEPTICAL  USERS 


Customer  criticism  persists  as  vendor 
moves  to  improve  quality  of  applications 


BY  MARC  L.  SONGINI 

TORONTO 

Faced  with  continued  user 
frustration  about  the  complex¬ 
ity  of  upgrading  to  its  E-Busi- 
ness  Suite  Hi  appli¬ 
cations,  Oracle  Corp. 
is  taking  steps  to  im¬ 
prove  the  software’s 
quality  and  make  it  easier  to  in¬ 
stall.  But  the  company  was  hit 
with  fresh  criticism  of  its  prod¬ 
uct  development  and  support 
processes  last  week,  illustrat¬ 
ing  how  far  it  has  to  go  to  win 
over  users. 

At  the  spring  conference  of 
the  independent  Oracle  appli¬ 
cation  user  group  here,  compa¬ 
ny  executives  detailed  new 
tools  and  internal  operating 
procedures  that  the  vendor 
hopes  will  raise  customer  satis¬ 
faction  levels  and  persuade 
users  to  migrate  to  Hi  in  greater 
numbers  than  they  have  thus 
far  (see  chart,  page  63). 

That  follows  the  announce¬ 
ment  last  month  of  several  up¬ 
grade  assistance  programs  and 
an  acknowledgment  by  Oracle 
CEO  Larry  Ellison  that  Hi  is 
hard  to  install. 

Members  of  the  Oracle  Ap¬ 
plications  Users  Group  who 
were  interviewed  last  week 
welcomed  Oracle’s  more  coop- 


ONLINE  COVERAGE 

For  background  information 
on  Oracle’s  user  relations,  read 
our  earlier  coverage  on  the  Web. 

QuickLinks:  28881, 27257 
www.computerworld.com 


erative  attitude.  But  there  were 
complaints  about  the  quality  of 
the  company’s  application  up¬ 
dates  and  its  technical  support, 
and  several  users  said  that 
they  want  to  see 
Oracle  deliver  on 
its  promises  over 
the  long  haul. 

“I’m  anxious  to  see  their 
words  become  reality.  Right 
now,  all  we  have  is  words,”  said 
Tom  Wyatt,  president  of  the 
Atlanta-based  OAUG,  which 
has  been  working  closely  with 


INSIDERS  SUM 
NAVY  INTRANET 

Managers  say  project 
soaks  up  resources 


BY  DAN  VERTON 

It’s  something  that  has  never 
before  been  attempted:  the 
reduction  of  hundreds  of  dis¬ 
parate  networks  across  the 
globe  and  tens  of  thousands  of 
legacy  applications  into  a  sin¬ 
gle,  integrated  and  secure  in¬ 
tranet  architecture.  It’s  change 
on  a  massive  scale,  and  it  has 
fueled  infighting  and  charges 
of  mismanagement. 

But  that  hasn’t  stopped  the 
U.S.  Navy  and  its  prime  con¬ 
tractor,  Plano,  Texas-based 
Electronic  Data  Systems  Corp., 
from  moving  forward  with 
the  $6.9  billion  Navy/Marine 
Corps  Intranet  project.  Last 


APPSUPPORT 


Oracle  to  remedy  the  Hi  up¬ 
grade  and  support  issues. 

If  Oracle  succeeds  in  getting 
its  application  development 
and  technical  support  teams  to 
work  more  closely  with  each 
other,  “that  will  have  a  tremen¬ 
dous  impact”  on  users,  Wyatt 
said.  He  works  as  director  of 
Oracle  systems  at  Sitel  Cofp.,  a 
customer  service  outsodfcing 
firm  in  Baltimore. 

Oracle  has  acknowledged 
that  fewer  than  40%  of  its  ex¬ 
isting  users  have  installed  the 
2-year-old  Hi  applications  or 
are  in  the  process  of  doing  so. 
While  the  company  has  no 
plans  to  roll  out  another  major 
Oracle,  page  63 


Admiral’s  Orders 


■  Each  site  must  complete 
deployment  when  scheduled. 

■  Delays  and  work  stoppages 
must  be  approved  by  the 
N/MCI  director. 

■  Security,  operations  and 
interoperability  goals  take 
precedence  over  desires  of 
individual  units. 

SOURCE:  REAR  ADM.  CHARLES  MUNNS. 

N/MCI  DIRECTOR.  MAY  20.  2002 


week,  the  admiral  in  charge  of 
the  N/MCI  program  ordered 
the  installation  of  more  than 
20,500  outsourced  seats  by 
June  30.  That  order  launched 
the  first  phase  of  a  100,000- 
seat  deployment  that  the  Pen¬ 
tagon  approved  on  May  3 
based  on  EDS’s  success  in 
meeting  the  requirements  of 
the  initial  test  and  evaluation 
stage  [QuickLink:  29642], 

Navy,  page  16 
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YOU'RE  PROTECTED  AGAINST  HACKERS,  VIRUSES  AND  WORMS. 

BUT  WHAT  ABOUT  ROSE  IN  BENEFITS? 


eTrust"'  Security  Solutions 

Complete  protection  for  your  entire  enterprise. 


When  it  comes  to  protecting  your  business,  you  need  security  that  can  protect  your 
enterprise  from  potential  threats,  no  matter  where  they  may  come  from.  That's  exactly 
what  eTrust  does.  Our  family  of  products  allows  you  to  not  only  safeguard  your  entire 
enterprise,  but  also  view  and  manage  that  security  either  centrally  or  from  multiple 
delegated  locations.  So  you  can  continue  to  grow  and  maximize  new  opportunities 
while  minimizing  your  risk.  And  that's  security  you  can  feel  secure  about. 


Computer  Associates™ 


HELLO  TOMORROW  WE  ARE  COMPUTER  ASSOCIATES  THE  SOFTWARE  THAT  MANAGES  eBUSINESS™ 


ca.com/etrust 


©2001  Computer  Associates  International,  Inc.  (CA).  All  trademarks,  trade  names,  service  marks,  and  logos  referenced  herein  belong  to  their  respective  companies. 


FIELD  REPORT: 
TALKING  IN 
PACKETS 

Voice  over  IP  at  compa¬ 
nies  like  Embarcadero 
Systems  (illustrated  left) 
promises  companies  low- 
cost  convergence  for 
voice  and  data,  but  many 
barriers  remain.  PAGE  50 


ENCRYPTION 
FOR  EVERYONE 


This  week’s  Future  Watch  focuses  on  emerging 
technologies  that  could  make  encryption  easy 
enough  for  common  use.  PAGE  56 
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COMPUTERWO  RLDTH I S  WEEK 


HEWS  4 

4  Sears  is  mum  about  the  sudden 
departure  of  CIO  Jerry  Miller  just 
days  after  the  Lands’  End  acquisi¬ 
tion  announcement. 

5  In  the  wake  of  reports  that  ter¬ 
rorists  may  have  slipped  into  the 
U.S.  on  cargo  ships,  New  York  Port 
Authority  officials  say  beefed-up 
IT  systems  are  needed  to  help  stop 
such  breaches. 

8  Sun’s  latest  version  of  Solaris 
includes  more  than  300  new  fea¬ 
tures  intended  to  boost  the  reliabil¬ 
ity,  availability,  scalability  and  per¬ 
formance  of  the  operating  system. 

12  The  Web  services  options  for 
developers  of  enterprise  integra¬ 
tion  software  continue  to  grow,  as 
both  Tibco  Software  and  Vitria 
Technology  release  new  tools. 


BREAKING  NEWS 

For  breaking  news,  updated  twice  daily,  visit: 

QuickLink:  a1510 
www.computerworld.com 


IS  LINUX  TOO  HARD? 

In  our  Operating  Systems  forum, 
community  members  discuss  Linux 
and  whether  it’s  easy  enough  for 
users  to  have  on  their  desktops. 

QuickLink:  a2070 


BUSINESS  25 

25  In  the  debut  of  a  new  column 
called  Peer  to  Peers,  National  Retail 
Federation  Vice  President  Cathy 
Hotka  offers  a  list  of  techniques 
that  IT  leaders  can  use  to  update 
themselves  on  technologies  with¬ 
out  breaking  the  bank. 

26  Computer  science  students 

are  duking  it  out  with  laid-off  vet¬ 
eran  technicians  and  entry-level 
workers  for  coveted  IT  positions. 

42  Leasing  mainframes  and 

servers  can  be  a  lot  cheaper  than 
buying  them  upfront  and  easier  to 
upgrade,  say  IT  purchasing  pros 
who  have  benefited  from  the 
switch. 

43  Chief  of  information  is  a  new 

title  being  tested  by  dental  prod¬ 
ucts  maker  A-dec,  where  the  CFO 
reports  to  the  newly  appointed 
information  chief. 


WWW.COM 


ADVICE  FROM 
IT  PROFESSIONALS 

As  this  year’s  college  seniors  gradu¬ 
ate  and  enter  the  job  market,  they 
probably  want  to  know  what  kind 
of  jobs  and  salaries  they  can  expect. 
Some  IT  veterans  offer  their  in¬ 
sights  to  the  would-be  rookies  in 
our  Careers  forum. 

QuickLink:  a2060 


TECHNOLOGY  49 

49  Some  IT  decisions  made 

recently  remind  columnist 
Nicholas  Petreley  of  the  popular 
entertainments  of  his  youth. 
Remember  Planet  Bizarro  and 
those  body-snatching  pod  people? 

54  QuickStudy:  Anti-aliasing 
smooths  out  the  edges  of  diagonal 
and  curved  lines  in  computer 
graphics,  eliminating  the  jagged  or 
stair-stepped  look.  Learn  more  in 
this  week’s  primer. 

55  XML’s  self-describing  nature 

may  be  its  greatest  strength  as  a 
technology,  but  it’s  also  a  serious 
security  vulnerability,  says  reviews 
editor  Russell  Kay. 

57  Security  Journal:  a  test  instal¬ 
lation  of  a  wireless  LAN  leaves  the 
entire  network  exposed  at  Mathias 
Thurman’s  company,  leading  him 
to  decide  on  a  layered  security 
design. 
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CRYPTO  CRITIQUE 

One  of  the  inventors  of  public-key 
cryptography  talks  with  Computer- 
world  about  problems  with  encryp¬ 
tion  today  and  what  the  technology 
will  look  like  in  the  future.  Read  the 
Q&A  with  Martin  Heilman,  profes¬ 
sor  emeritus  at  Stanford  University. 
QuickLink:  29732 


22  Patricia  Keefe  writes  that 
even  though  you’re  a  technology 
specialist,  you’ll  have  to  concen¬ 
trate  more  on  accounting  and 
organization. 

22  Pimm  Fox  says  to  look  beyond 
the  claims  of  traditional  relational 
database  vendors  when  you  want 
to  build  the  data  warehouse  that 
will  best  suit  your  company’s 
needs. 

23  Michael  Gartenberg  writes 

that  as  more  businesses  embrace 
instant  messaging,  they  should 
be  aware  of  the  risks  involved. 

64  Frank  Hayes  says  a  recent 
USA  Today  report  that  cited 
billions  of  dollars  in  wasteful 
IT  spending  overlooked  several 
important  factors. 
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WHAT’S  A  QUICKLINK? 

OOn  some  pages  in  this  issue 
you’ll  see  a  QuickLink  code 
pointing  to  additional,  related  con¬ 
tent  on  our  Web  site.  lust  enter  that 
code  into  our  QuickLink  box  online, 
which  you’ll  see  at  the  top  of  each 
page  on  our  site. 

Use  QuickLinks  to  see  related  sto¬ 
ries,  discussion  forums,  research 
links,  archives  and  more. 
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Sears’  CIO  Departs  After 
Lands’  End  Acquisition 


No  comment  from  retailers,  but  observers 
disagree  on  deal’s  influence  on  the  move 


CURRICULUM  VITAE 


IBM  confirmed  that  it  is  laying  off 
about  750  people  at  four  U.S.  facili¬ 
ties  in  the  first  of  what  is  expected 
to  be  a  series  of  cutbacks  by  the 
company.  Sources  previously  said 
that  IBM  was  preparing  to  cut  up  to 
9,600  of  its  320,000  employees.  A 
company  spokeswoman  last  week 
declined  to  say  how  many  layoffs 
are  likely  at  IBM. 


Second  Ameritrade 
Co-CIO  to  Leave 

Omaha-based  Ameritrade  Holding 
Corp.  announced  that  Raymond 
Dury,  the  remaining  member  of  its 
former  co-CIO  executive  tandem, 
will  resign  effective  next  month. 
Fellow  co-CIO  Mok  Choe  left  in  No¬ 
vember,  and  the  online  brokerage 
said  it  recently  launched  an  external 
search  for  a  new,  single  CIO.  Until 
one  is  hired,  Ameritrade  added,  the 
IT  managers  who  now  report  to 
Dury  will  be  responsible  for  day- 
to-day  technology  operations. 

Chemicals  Maker 
Names  Head  of  IT 

Houston-based  Lyondell  Chemical 
Co.  said  Eric  Silva,  its  director  of  hu¬ 
man  resources  services,  will  take 
over  as  vice  president  of  IT  on  June 
1.  Silva  will  report  to  Lyondell’s  chief 
operating  officer  and  replace  Robert 
Tolbert,  who  is  retiring.  Lyondell  said 
Silva  has  also  held  jobs  in  finance 
and  played  a  key  role  in  an  installa¬ 
tion  of  SAP  AG  applications. 

Comcast  Denies 
Privacy  Violations 

Comcast  Corp.  in  Philadelphia  de¬ 
nied  charges  made  in  a  class-action 
lawsuit  filed  in  Michigan  that  the 
cable  TV  and  Internet  service  pro¬ 
vider  violated  the  privacy  rights  of 
customers  by  collecting  data  on  their 
Web  surfing  habits.  In  February, 
Comcast  stopped  collecting  the  data. 


BY  TODD  R.  WEISS 

FFICIALS  AT  SEARS, 
Roebuck  and  Co. 
were  tight-lipped 
last  week  about 
the  sudden  de¬ 
parture  of  CIO  Jerry  Miller  on 
May  17,  just  four  days  after  the 
company  announced  that  it 
will  acquire  catalog  and  online 
retailer  Lands’  End  Inc.  next 
month. 

Three  days  before  his  depar¬ 
ture,  Miller  spoke  with  Com- 
puterworld  about  the  pending 
acquisition  and  how  it  would 
affect  IT  at  both  companies 
[QuickLink:  29902].  Miller  said 
the  early  plans  for  the  two 
companies  included  keeping 
the  respective  IT  departments 
separate,  though  Lands’  End 
would  be  a  wholly  owned  sub¬ 
sidiary  of  Hoffman  Estates,  Ill.- 
based  Sears. 


BY  MICHAEL  MEEHAN 

Energy  deregulation  in  Texas 
has  hit  an  IT  snag,  as  the 
agency  in  charge  of  the  state’s 
electricity  grid  operation  last 
week  brought  in  a  for-hire  CIO 
firm  to  fix  problems  that  have 
caused  persistent  customer 
service  delays. 

The  Electric  Reliability 
Council  of  Texas  Inc.  (ERCOT) 
has  hired  The  Feld  Group  Inc. 
in  Irving,  Texas,  to  trouble¬ 
shoot  system  problems  that 


Miller  couldn’t  be  reached 
for  comment,  and  Sears  execu¬ 
tives  didn’t  return  several  calls 
asking  for  their  remarks  re¬ 
garding  Miller’s  departure. 

Peggy  Palter,  a  Sears  spokes¬ 
woman,  confirmed  that  Miller 
no  longer  works  for  the  com¬ 
pany,  but  she  refused  to  say 
whether  he  was  fired  or  re¬ 
signed  from  his  job.  “We  do  not 
comment  on  former  employ¬ 
ees,”  she  said. 

Don  Zimmerman,  a  Sears 
vice  president  of  IT  for  credit, 
home  services  and  financial 
products,  has  been  named  in¬ 
terim  CIO,  Palter  said.  Zimmer¬ 
man,  who  joined  Sears  in  1996 
after  12  years  with  Purchase, 
N.Y.-based  PepsiCo  Inc.,  could 
not  be  reached  for  comment. 

A  spokeswoman  for  Dodge- 
ville,  Wis.-based  Lands’  End 
also  refused  to  comment.  Frank 


have  arisen  around  switching 
customers  to  new  service  pro¬ 
viders  and  issuing  bills  in  a 
timely  manner. 

Starting  Jan.  1,  Austin,  Texas- 
based  ERCOT  became  respon¬ 
sible  for  every  service  order  in 
its  region,  which  covers  about 
85%  of  the  state.  While  other 
deregulated  states  have  made 
individual  power  companies 
responsible  for  the  orders, 
Tom  Noel,  president  and  CEO 
of  ERCOT,  said  his  company  is 


Miller  joined 
Sears  in  1994 
after  20  years  at 
a  drug  wholesale 
company. 

December  1998  Named  Sears  CIO 

1995-98  Sears  vice  president  of  logistics 

1994-95  Sears  senior  systems  director 

1974-94  Vice  president  of  IT  at  Bergen 
Brunswig  Corp. 

Giannantonio,  CIO  at  Lands’ 
End  since  February,  didn’t  re¬ 
turn  a  call  seeking  his  remarks. 

Examining  the  Possibilities 

Several  industry  analysts 
said  that  while  they  don’t  have 
direct  knowledge  of  Miller’s 
departure,  there  are  several 
possible  explanations  for  it. 

Michael  Dortch,  an  analyst 
at  Robert  Frances  Group  Inc. 
in  Westport,  Conn.,  said 
Lands’  End’s  technical  savvy 
both  online  and  in  its  catalog 
business  could  have  caused 


experiencing  the  growing  pains 
of  being  the  first  major  central 
authority  to  undertake  this 
type  of  work. 

“Things  were  supposed  to 
come  into  our  systems  in  a  cer¬ 
tain  sequence,”  he  said.  “What 
we’re  finding  is  people  can’t 
respond  in  the  sequence  that 
was  expected.  We  need  to 
make  it  bulletproof.” 

Pinpointing  Problems 

According  to  Noel,  ERCOT’s 
problems  center  on  the  han¬ 
dling  of  aberrant  data,  out-of¬ 
sequence  transactions  and 
legacy  systems  that  are  depen¬ 
dent  on  transaction  flows. 

He  said  that  out  of  ERCOT’s 
5.5  million  customers,  about 
200,000  to  300,000  are  experi¬ 
encing  problems. 

The  Feld  Group,  which  has 
performed  CIO  duties  for  First 
Data  Corp.,  Delta  Air  Lines 


Sears  executives  to  shift  IT  re¬ 
sponsibility  to  the  company 
with  more  success  in  those  ar¬ 
eas.  “That  might  be  sufficient 
to  cause  a  disruption  in  the 
corporate  firmament  over  at 
Sears,”  Dortch  said. 

Paul  Daversa,  CEO  of  exec¬ 
utive  search  firm  Resource 
Systems  Group  in  Stamford, 
Conn.,  said  Miller’s  departure 
probably  wasn’t  related  to  the 
Lands’  End  deal  and  might 
have  been  in  the  works  for 
some  time.  “For  them  to  do 
this  acquisition,  there  had  to 
be  technical  due  diligence” 
about  the  direction  in  which 
IT  was  heading,  Daversa  said. 
“He  knew  it  was  coming.” 

Carol  Baroudi,  an  analyst  at 
Baroudi  and  Associates  in  Ar¬ 
lington,  Mass.,  said  Miller  may 
have  been  let  go  simply  because 
he  didn’t  keep  quiet  about  the 
coming  IT  changes  as  part  of 
the  acquisition.  “Maybe  his 
days  were  numbered  by  the  ac¬ 
quisition  and  he  gave  them  an 
excuse,”  Baroudi  said.  ) 


Inc.  and  PepsiCo  Inc.,  was 
hired  in  April  to  perform  a  30- 
day  examination  of  ERCOT’s 
IT  systems.  The  Feld  Group’s 
report  called  for  better  error 
detection,  data  validation  as 
information  travels  across  ER¬ 
COT’s  systems,  and  a  simpler 
method  for  companies  doing 
business  with  ERCOT  to  share 
their  data. 

Most  important,  the  report 
suggested  “ensuring  the  ability 
to  reliably  deliver,  receive, 
trace  and  provide  status  of  all 
transactions  in  and  out  of 
ERCOT.” 

The  Feld  Group  has  been 
signed  to  a  six-month  contract 
to  oversee  the  company’s  sys¬ 
tems  upgrade. 

“It  may  be  that  we  can  fix 
these  problems  ourselves,  but 
it  would  take  longer,  and  we 
want  this  done  quick  and  done 
right,”  Noel  said.  I 


Electricity  Deregulation 
Causes  It  Problems  in  Texas 

State  hires  Feld  Group  to  tackle  service 
delays  and  other  problems  in  new  system 


IBM  Begins  Layoff 
Process  at  U.S.  Sites 
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Judge  May  ‘Haunt'  Microsoft 
For  Years  as  Remedy  Enforcer 

Case  outcome  could  follow  path  of  AT&T 
breakup,  with  future  complaints,  legal  issues 


nary  work  if  a  third  party  were 
to  file  a  complaint  about  Mi¬ 
crosoft’s  compliance  with  the 
remedy.  The  special  master 
would  gather  facts  and  deliver 
a  report  to  the  court  along  with 
possible  recommendations  for 

action.  The  entire  _ 

process  could  take 
four  months,  said 
states’  attorney  John 
Shenefield. 

Under  the  Bush 
administration  set¬ 
tlement,  a  three- 
member  technical  committee 
would  be  set  up  to  monitor 
compliance  and  bring  any  en¬ 
forcement  issues  to  the  Justice 
Department. 

Whether  this  case  becomes 
for  Kollar-Kotelly  what  it  be¬ 
came  for  Green  remains  to  be 
seen.  One  expert,  Ernest  Gell- 
horn,  an  antitrust  professor  at 
George  Mason  University  Law 


CASE  HISTORY 

For  complete  Computerworld 
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School  in  Arlington,  Va.,  said 
the  specific  terms  of  the  AT&T 
breakup  “were  so  undefined 
and  open-ended  that  the  par¬ 
ties  were  constantly  going  back 
to  court.”  He  said  he  doesn’t 
believe  Kollar-Kotelly  will  face 
a  similar  problem. 

The  idea  of  a  spe¬ 
cial  master  as  the 
nonsettling  states 
proposed  may  be 
appealing  to  the 
judge,  especially  if 
that  person  brings 
technical  expertise,  said  Hil¬ 
lard  Sterling,  an  attorney  and  a 
partner  at  Gordon  &  Glickson 
LLC  in  Chicago. 

“The  question  is  whether 
the  judge  or  special  master  can 
tame  both  sides  to  live  com¬ 
fortably,  albeit  competitively,” 
he  said.  “It’s  hard  to  believe 
that  we’re  seeing  the  last  wave 
of  litigation  on  these  issues.”  ft 


Port  Authorities  Call  for  IT  Enhancements 


BY  PATRICK  THIBODEAU 

WASHINGTON 

Judge  Colleen  Kollar-Kotelly 
may  well  become  a  legal  spec¬ 
ter  in  Microsoft  Corp.’s  future. 

As  with  the  judge  who  over¬ 
saw  the  breakup  of  AT&T 
Corp.  in  1984,  Kollar-Kotelly, 
who  is  overseeing  the  remedy 
hearing  of  the  antitrust  case, 
may  see  a  steady  stream  of 
legal  issues,  complaints  from 
Microsoft’s  competitors  or  re¬ 
quests  for  changes  from  the 
software  giant  arising  from 
whatever  remedy  she  eventu¬ 
ally  imposes.  And  if  Microsoft 
fails  to  comply,  in  her  words, 
she  will  “haunt”  the  company. 

In  the  years  following 
AT&T’s  breakup,  Judge  Harold 
Green  made  numerous  legal 
decisions,  particularly  as  the 
new  Baby  Bells  sought  waivers 
from  various  legal  require¬ 
ments.  The  unhappy  Baby 
Bells  painted  him  as  de  facto 
government  regulator. 

“The  main  lesson  learned  is 
even  a  decree  that  requires  sig¬ 
nificant  judicial  involvement 
can  be  made  to  work,”  said 
Michael  McNeely,  a  former  U.S. 
Department  of  Justice  attorney 
who  worked  on  the  AT&T  case. 

“For  all  the  grousing  along 
the  way,  to  me  it  seemed  pretty 
clear  that  the  breakup  of  the 
Bell  system  . . .  has  been  to  the 
benefit  of  consumers,”  said 
McNeely,  now  an  attorney  at 
Palo  Alto,  Calif.-based  Gray 
Cary  Ware  &  Freidenrich. 

Compliance  Issues 

In  final  arguments,  Kollar- 
Kotelly  heard  from  both  sides 
about  how  they  think  the  rem¬ 
edy  should  be  enforced.  She 
used  that  hearing  as  an  oppor¬ 
tunity  to  tell  Microsoft  what 
kind  of  enforcer  she  will  be. 

After  a  Microsoft  attorney 
insisted  that  the  company 
would  faithfully  comply  with 
any  order,  the  judge  said  there 


would  be  no  other  alternative 
but  compliance. 

“I  would  expect  that  that’s 
going  to  be  the  case,”  said  Kol¬ 
lar-Kotelly,  “because  these  are 
the  kinds  of  things  that  come 
back  to  haunt  you  if  it  turns 
out  you  don’t,  because  I  will 
have  a  memory  for  all  of  these 
statements.” 

Attorneys  for  the  nine  non¬ 
settling  states  recently  outlined 
a  plan  for  the  appointment  of  a 
special  master  to  oversee  the 
remedy  and  conduct  prelimi- 


Terrorist  warnings 
prompt  closer  look 
at  security  on  ships 

BY  DAN  VERTON 

WASHINGTON 

A  new  terrorism  warning  sur¬ 
faced  last  week  indicating  that 
as  many  as  25  terrorists  of  Mid¬ 
dle  Eastern  origin  may  have 
slipped  into  the  U.S.  unnoticed 
after  stowing  away  aboard  car¬ 
go  ships  that  entered  four  ma¬ 
jor  U.S.  seaports. 

The  threat,  while  not  new, 
underscores  the  need  for  bet¬ 
ter  IT  systems  to  help  port  au¬ 
thorities  and  local  law  enforce¬ 
ment  agencies  better  track  sus¬ 
pected  terrorists  and  criminals 
who  attempt  to  enter  through 
the  nation’s  seaports,  say  port 
authority  officials. 

Beth  Rooney  is  manager  of 
port  security  at  The  Port  Au¬ 
thority  of  New  York  and  New 
Jersey,  where  specific  threats 
to  historical  landmarks  last 
week  put  officials  on  a  height¬ 
ened  state  of  alert.  One  of  the 
biggest  port  security  problems, 
she  said,  is  that  ship  cargo  in¬ 
formation  isn’t  received  by 


port  authorities  until  three  to 
five  days  before  a  ship  arrives. 

“We  are  pushing  for  [sys¬ 
tems  to  ensure]  supply  chain 
integrity  and  the  integrity  of 
the  contents  of  the  container, 
including  that  there’s  not  a 
person  in  there,”  said  Rooney, 
referring  to  the  need  for  time¬ 
ly  transmission  of  certified 
container  inspection  docu¬ 
ments  from  authorities  out¬ 
side  the  U.S. 

“I  would  also  like  to  see  a 


We  are  pushing 
for  [systems  to 
ensure]  supply 
chain  integrity 
and  the  integrity 
of  the  contents 
of  the  container. 

BETH  ROONEY,  MANAGER  OF  PORT 
SECURITY,  THE  PORT  AUTHORITY 
OF  NEW  YORK  AND  NEW  JERSEY 


database  or  notification  sys¬ 
tem  for  ports  and  law  enforce¬ 
ment  agencies  affiliated  with 
the  port  to  network  and  alert 
each  other  when  we  discover 
something  out  of  the  ordinary,” 
said  Lindy  Rinaldi,  chief  of  po¬ 
lice  for  the  South  Carolina 
State  Ports  Authority.  “Right 
now,  we  do  not  have  any  com¬ 
munication  [systems]  to  link 
other  ports  and  law  enforce¬ 
ment  agencies  together. 

“Currently,  all  notifications 
are  made  by  phone,”  Rinaldi 
noted.  “This  can  cause  serious 
delays  in  passing  along  much- 
needed  information  that  would 
be  useful  for  our  homeland  se¬ 
curity  protection.” 

Financial  Constraints 

Anne  Moise,  manager  of  port 
security  at  the  South  Carolina 
State  Ports  Authority,  said  her 
organization  has  big  plans  for 
improving  security,  but  little 
funding.  For  example,  the  port 
in  Charleston  has  rolled  out  an 
identification  system  for  access 
control.  “This  system  is  not  ful¬ 
ly  utilized  yet  due  to  funding  is¬ 
sues,  but  the  format  is  in  place,” 
Moise  said. 

Funding  may  be  on  its  way, 


Remedy  Options 

The  Microsoft  antitrust 
trial  judge  has  three  paths 
to  enforcement. 

WHAT  MICROSOFT  WANTS: 
A  three-member  technical 
committee  would  monitor 
the  company,  with  the  Jus¬ 
tice  Department  oversee¬ 
ing  enforcement. 


WHAT  THE  NONSETTLING 
STATES  WANT:  A  court- 
appointed  and  -monitored 
special  master  would  over¬ 
see  enforcement. 


WHAT  THE  JUDGE  WANTS: 
Unknown,  but  she  could 
craft  rules  that  are  a  hy¬ 
brid  of  the  proposals  or 
something  entirely  new. 


however.  A  U.S.  Department 
of  Defense  appropriations  bill 
could  provide  $93.3  million  to 
the  U.S.  Department  of  Trans¬ 
portation’s  new  Transporta¬ 
tion  Security  Administration 
(TSA)  to  fund  port  security  as¬ 
sessments  and  enhancements. 
Likewise,  the  Port  and  Mar¬ 
itime  Security  Act  of  2001, 
which  was  passed  by  the  Sen¬ 
ate  Dec.  20,  calls  for  $390  mil¬ 
lion  in  grants  for  port  security 
infrastructure  improvements. 

Funding  can’t  come  soon 
enough,  port  authority  offi¬ 
cials  said. 

“Transactions  between  the 
buyer  and  seller  take  place  40 
to  50  days  ahead  of  time,”  said 
Rooney.  “If  you  can  provide 
the  purchase  order  informa¬ 
tion  to  the  authorities  at  the 
time  the  transaction  is  made, 
then  we  can  have  intelligence 
on  what  to  look  for.  It’s  integra¬ 
tion.  The  systems  and  the  data 
are  out  there.” 

The  Port  Authority  of  New 
York  and  New  Jersey  recently 
requested  funding  to  build  and 
test  a  pilot  version  of  such  a 
purchase  order  transaction¬ 
monitoring  function  in  its  sys¬ 
tem.  Grants  will  be  awarded  by 
the  TSA  next  month. 

“We  can  build  the  function¬ 
ality  and  have  it  ready  to  go  in 
July,”  Rooney  said,  ft 
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Brokerages  Resist  NYSE  Call 
For  Electronic  Order  Capture 


New  rules  could  prove  costly  in  terms 

of  tech  spending  and  customer  service 


BY  LUCAS  MEARIAN 

PROPOSED  rule 
change  by  the 
New  York  Stock 
Exchange  (NYSE) 
requiring  the  elec¬ 
tronic  capture  of  all  stock  or¬ 
ders  before  they  leave  the  trad¬ 
ing  desk  has  Wall  Street  con¬ 
cerned  that  it  will  cost  millions 
of  dollars  to  implement  and 
place  too  great  an  onus  on  the 
IT  departments  of  brokerages 
that  still  record  large  stock  or¬ 
ders  on  paper. 

Specifically,  the  NYSE  has 
proposed  amendments  to  Rules 
123  and  132  that  would  require 
brokerages  to  electronically 
capture  trade  orders  at  the 
point  of  receipt  prior  to  deliver¬ 
ing  a  physical  order  ticket  to  a 
“post.”  In  light  of  the  recent 
stock-rating  scandal  involving 
Merrill  Lynch  &  Co.  that  is 
expected  to  spread  to  other 
brokerages,  electronic  trade  re¬ 
cording  would  further  expand 
the  NYSE’s  oversight  capability. 

“This  initiative  of  the  elec¬ 
tronic  capture  of  orders  before 
they’re  presented  in  the  mar¬ 
ketplace  is  an  effort  to  avoid  a 
situation  where  a  person  could 
falsify  an  order  ticket,”  said  a 
NYSE  spokesman. 

The  NYSE  rules  change  pro¬ 
poses  that  17  data  fields  be 
filled  out  by  traders,  including 
information  such  as  a  firm’s  ex¬ 
change  symbol,  clearing  mem¬ 
ber  organizations,  the  number 
of  shares  involved  in  a  trade 
and  the  tracking  or  control 
numbers  used. 

“Most  firms  don’t  have  a  sys¬ 
tem  for  systemically  capturing 
information  about  the  order  at 
[me  trading  desk],”  said  Scott 
Kursman,  vice  president  and 
associate  general  counsel  for 
the  Securities  Industry  Associ¬ 
ation  (SIA)  in  New  York. 

Kursman  argues  that  a  paper 


order  ticket  can  be  updated 
with  “a  flick  of  a  pen,”  while  it 
is  much  more  difficult  to  go 
into  a  software  application  and 
change  17  data  fields. 

The  Big  Board  has  devel¬ 
oped  a  program  called  Front 
End  Systemic  Capture  (FESC) 
that  expands  upon  its  elec¬ 
tronic  network  for  the  sys¬ 
temic  capture  of  all  orders 
prior  to  execution. 

Costly  Links 

SIA  officials  wrote  an  April 
26  letter  to  the  Securities  and 
Exchange  Commission  (SEC) 
—  which  would  have  to  ap¬ 
prove  the  NYSE  rule  change  — 
opposing  the  amendment,  ar¬ 
guing  that  it  would  hurt  the 
broker/client  relationship  and 
that  it  would  be  costly  for 
firms  to  systemically  link  in- 


BY  BRIAN  SULLIVAN 

Microsoft  Corp.  has  launched  a 
$10  million  campaign  to  lure 
customers  from  rival  America 
Online  Inc.,  and  the  technol¬ 
ogy  it’s  depending  on  comes 
from  a  12-person  company  in 
New  York. 

TrueSwitch,  from  Esaya  Inc., 
provides  the  means  for  cus¬ 
tomers  of  Dulles,  Va.-based 
AOL  to  switch  their  e-mail 
accounts,  address  books  and 
stored  e-mail  over  to  The 
Microsoft  Network  (MSN)  on¬ 
line  service,  said  Lisa  Gurry, 
Microsoft’s  MSN  project  man¬ 
ager.  “This  is  the  primary  solu¬ 
tion  that  we  looked  at,”  Gurry 
said.  “It  offered  the  most  inno¬ 
vative  technology.” 


formation  that  resides  in  mul¬ 
tiple  locations  in  both  elec¬ 
tronic  and  paper  formats. 

Kursman  said  the  brokerages 
most  affected  by  the  rule  are 
those  that  specialize  in  block 
orders  —  orders  of  10,000 
shares  or  more  —  which  are 
still  recorded  on  physical  tick¬ 
ets.  Between  1%  and  4%  of  or¬ 
ders  from  large  broker/dealer 
firms  are  written  on  paper  at 
the  trading  desk  on  the  floors  of 
exchanges.  Firms  such  as  Can¬ 
tor  Fitzgerald  LP  and  Goldman, 
Sachs  &  Co.  specialize  in  large 
institutional  orders  that  are 
taken  manually,  Kursman  said. 

The  NYSE  rule  change  re¬ 
quires  backing  into  the  firm’s 
data-collection  process  to  re¬ 
trieve  information  about  an  or¬ 
der  from  an  earlier  point  in  the 
life  of  that  order.  “It’s  a  ques¬ 
tion  of  how  far  the  firm  can 
look  back  for  that  information 
and  whether  all  of  it  is  available 
for  electronic  capture  for  the 
purpose  of  creating  a  single 


Mark  Kasiraja,  chief  operat¬ 
ing  officer  and  co-founder  of 
Esaya,  said  the  company  CEO, 
Thomas  Isaac,  designed  the 
software  specifically  to  let  In¬ 
ternet  service  providers  (ISP) 
do  what  MSN  is  doing:  grab¬ 
bing  a  rival’s  customers.  “We’re 
targeting  ISPs,”  Kasiraja  said. 

But  Kasiraja  said  the  tool 
could  be  used  for  any  operation 
in  which  information  needs  to 
be  transferred  from  one  Web- 
based  system  to  another.  And 
the  company  is  willing  to  tailor 
the  tool  to  meet  each  client’s 
specific  needs,  he  added. 

The  tool,  which  is  Java- 
based  and  operates  on  systems 
running  Unix,  is  at  its  core  a 
data  integration,  mapping  and 


Start-up’s  Tool  Helps  Users 
Move  From  AOL  to  MSN 


Not  as  Easy 
As  1-2-3 


The  NYSE’s  proposed 
amendments  to  Rules  123 

and  132  would: 

'  -■/  ..  . 

■  Require  the  electronic 
capture  of  order  execution 
reports  at  point  of  sale. 


■  Require  electronic  capture 
of  orders  at  point  of  receipt. 


■  Create  a  complete  systemic 
record  of  orders  handled  by 


l 

all  brokers  and  their  firms. 


record,”  Kursman  said. 

For  institutional  firms  that 
handle  large  block  orders,  the 
change  would  require  them  to 
set  up  electronic  order  entry 
points  for  traders.  Those  com¬ 
puters  would  have  to  link  with 
the  firm’s  institutional  record¬ 
keeping  databases  and  with  the 


transformation  engine.  It  logs 
on  to  AOL  using  the  customer’s 
current  user  ID  and  password. 
It  then  collects  all  of  the  neces¬ 
sary  information  about  the 
user’s  e-mail  address  book 
and  account  and  migrates  it  to 
MSN,  Kasiraja  said. 

Kasiraja  said  that  if  the  MSN 
campaign  is  a  success,  Esaya 
should  have  no  problems  scal¬ 
ing  TrueSwitch  to  meet  a  rise 
in  demand.  He  said  Esaya  mon¬ 
itors  load,  and  if  demand  goes 
up,  the  company  simply  adds 
more  servers  to  the  operation. 
That,  he  said,  is  all  that’s  re¬ 
quired  to  scale  the  tool. 

TrueSwitch  goes  into  an  ap¬ 
plication  through  the  front  end 
rather  than  the  back  end,  he 
said.  That  lets  business  rules 
remain  intact  during  a  change. 

Kasiraja  said  pricing  is  based 
on  a  flat  licensing  fee  plus  a 
per-user  fee.  He  declined  to 
elaborate,  and  MSN  wouldn’t 
comment  on  how  much  it 


NYSE’s  FESC  system.  Kursman 
estimated  that  it  would  cost  in¬ 
stitutional  traders  like  Cantor 
Fitzgerald  and  Goldman,  Sachs 
$2  million  to  $10  million  to  set 
up  the  order  trail  system,  in¬ 
cluding  additional  hardware 
and  storage  capacity. 

Another  problem  with  the 
proposed  rules  change  is  that 
it’s  alarmingly  similar  to  com¬ 
puter  system  changes  broker¬ 
ages  had  to  make  to  comply 
with  the  Order  Audit  Trail  Sys¬ 
tem.  That  project  was  approved 
by  the  SEC  in  June  1998  on  be¬ 
half  of  the  Washington-based 
National  Association  of  Securi¬ 
ties  Dealers  Inc.  (NASD),  the 
Nasdaq  Stock  Market’s  parent. 

“Brokers  didn’t  want  to  have 
to  go  through  a  whole  other 
programming  effort  to  create  a 
similar  process  for  the  NYSE 
side,  which  had  a  different  stan¬ 
dard  associated  with  it,”  said 
analyst  Larry  Tabb  at  Tower- 
Group  in  Needham,  Mass. 

An  NYSE  spokesman  said 
the  exchange  “made  every  ef¬ 
fort  to  have  our  proposal  match 
up  with  procedures  already  ap¬ 
proved  by  the  SEC  with  respect 
to  the  NASD  order  trail  system 
. . .  but  with  differences  between 
the  markets,  they  couldn’t  be 
identical.”  I 


spent  on  the  tool.  But  Kasiraja 
said  the  higher  the  licensing 
fee  paid  upfront,  the  lower  the 
per-user  fee  will  be. 

“There  is  nothing  techno¬ 
logically  surprising  about  it 
at  all,”  said  David  Ferris,  presi¬ 
dent  of  San  Francisco-based 
Ferris  Research  Inc.  I 


ISP  Switcheroo 

Esaya  says  TrueSwitch 
does  the  following: 

MOVES  THE  DATA  in  important 
applications  between  providers. 

NOTIFIES  selected  contacts  of 
the  user’s  new  e-mail  address. 

FORWARDS  E-MAIL  to  a  new 

address  for  as  long  as  the  old 
account  is  active. 

AUTOMATES  account  cancella¬ 
tion  so  users  don’t  have  to  talk  to 
customer  service  representatives 
from  their  old  ISPs. 
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Sun  Sees  Q4  Profit 
Despite  Order  Lag 

Sun  Microsystems  Inc.  said  it’s 
sticking  by  a  forecast  that  it  will 
return  to  profitability  in  its  fourth 
quarter  ending  June  30,  even 
though  orders  are  lagging  slightly 
behind  third-quarter  levels.  Sun  had 
predicted  a  slight  sequential  uptick 
in  revenue  this  quarter.  But  Michael 
Lehman,  Sun’s  chief  financial  offi¬ 
cer,  said  the  current  order  shortfall 
“is  not  of  great  significance.” 


Reports:  IT  Spending 
Likely  to  Be  Flat 

Technology  spending  budgets  con¬ 
trolled  by  the  IT  departments  at  U.S. 
firms  are  expected  to  drop  by  an  av¬ 
erage  of  0.4%  this  year,  according 
to  a  survey  of  369  users  conducted 
this  month  by  Gartner  Inc.  in  Stam¬ 
ford,  Conn.,  and  The  Goldman 
Sachs  Group  Inc.  in  New  York. 

Cambridge,  Mass.-based  Giga  In¬ 
formation  Group  Inc.  also  predicted 
that  IT  spending  this  year  will  be 
about  the  same  as  last  year. 


Oracle  Releases  9i 
Upgrade  to  Developers 

Oracle  Corp.  released  an  early  ver¬ 
sion  of  an  upcoming  Oracle9i  data¬ 
base  upgrade  for  software  testing 
use  by  application  developers.  The 
0racle9i  Database  Release  2  code 
is  available  free  of  charge  to  devel¬ 
opers  who  have  registered  for  the 
early-access  program.  The  upgrade 
is  due  for  general  release  next 
month  on  a  mix  of  Unix,  Linux  and 
Windows  systems,  Oracle  said. 


Netscape  Ships  7.0 
Web  Browser  Preview 

Netscape  Communications  Corp. 
announced  a  preview  release  of  its 
Netscape  7.0  Web  browser.  The 
subsidiary  of  AOL  Time  Warner  Inc. 
said  new  features  include  the  ability 
to  click  between  multiple  tabbed 
Web  pages  in  a  single  window. 


Sun  Weaves  Key 
Features  Into  Solaris  9 


Adds  middleware,  management  capabilities 
to  up  functionality,  lower  costs  of  its  Unix  OS 


BY  JAIKUMAR  VIJAYAN 

SUN  MICROSYSTEMS  Inc.’s 
move  to  integrate  key 
middleware  and  man¬ 
agement  components 
into  the  latest  version 
of  its  Unix  operating  system, 
which  was  released  last  week, 
should  give  customers  added 
functionality  at  a  lower  cost 
than  before,  say  IT  managers 
and  analysts. 

Making  such  a  wide  range  of 
functions  available  at  the  oper¬ 
ating  system  level  is  yet  anoth¬ 
er  sign  of  Sun’s  maturity  —  and 
ambition  —  in  the  enterprise 
software  space,  said  Yefim 
Natis,  an  analyst  at  Gartner 
Inc.  in  Stamford,  Conn. 

“Sun  has  realized  that  the  op¬ 
erating  system  of  the  past  func¬ 
tions  at  far  too  low  a  level  to 
compete  with  enterprise  infra¬ 
structure  software,”  Natis  said. 
“What  they  are  trying  to  do  is 
to  move  their  operating  system 
up  the  stack”  with  the  latest  re¬ 
lease  of  Solaris,  Natis  said. 

Solaris  9  comes  equipped 
with  more  than  300  new  fea¬ 
tures  intended  to  boost  the  re¬ 
liability,  availability,  scalability 
and  performance  of  the  Unix 
operating  system.  Key  features 
include  a  bundled  application 
server,  a  directory  server  and 
enhancements  to  the  operating 
system’s  partitioning,  high- 
availability,  clustering  and  se¬ 
curity  capabilities. 

The  features  should  give 
customers  greater  functionality 
right  out  of  the  box,  said  Shawn 
Willett,  an  analyst  at  Current 
Analysis  Inc.  in  Sterling,  Va. 

“If  you  are  a  Sun  user  and 
thinking  of  implementing 
these  functions,  it  is  going  to 


AN  EXEC  ON  9 


Sun  Vice  President  Anil  Gadre  discusses 
Solaris  9  and  Unix. 

OQuickLink:  29341 

www.computerworld.com 


be  easier  and  cheaper  to  get  it 
with  the  operating  system” 
than  it  would  be  to  buy  and  in¬ 
stall  those  features  separately, 

Willet  said. 

For  instance,  the  availability 
of  the  Lightweight 

Directory  Access  APFPATIIIfi 

Protocol  (LDAP)  di-  UlCHIIIIIlU 
rectory  server  with 
Solaris  9  should  make 


SYSTEMS 


identity  management  and  ac¬ 
cess  control  tasks  easier  to  han¬ 
dle,  said  Matthew  D.  Stock,  di¬ 
rector  of  IT  in  the  computer  de¬ 
partment  at  the  University  of 
Buffalo  in  New  York. 

The  department  currently 


uses  a  Network  Information 
System  (NIS)  design  for  main¬ 
taining  user  identification  and 
authentication  information  on 
more  than  5,000  users.  An 
LDAP  server  provides  greater 
security  and  manageability  for 
doing  that,  Stock  said. 

“As  a  department,  we  are  try¬ 
ing  to  find  a  different  solution 
and  get  away  from  this  whole 
business  of  password 
files  and  NIS,”  Stock 
said. 

Bundling  the  Sun 
Open  Net  Environ¬ 
ment  application  server  with 
the  operating  system  should 
also  reduce  application  server 
costs  and  make  installation 
easier.  It  should  also  help  push 
wider  adoption  of  the  Sun  ap¬ 
plication  server  platform  in  a 


More  Under 
The  Sun 

The  functions  bundled  with 
Solaris  9  include: 

■Sun  ONE  application  server 

■Sun  ONE  Directory  Server 

■Solaris  9  Resource 
Manager  software 

■  Solaris  Volume  Manager 

software 

1  

■  SunScreen  Firewall 


market  dominated  by  IBM’s 
WebSphere  and  BEA  Systems 
Inc.’s  WebLogic  application 
servers,  analysts  said. 

Some  of  the  most  important 
enhancements  to  Solaris  are 
those  that  make  hosting  large 
database  management  systems 
an  easier  and  less  time-con¬ 
suming  process,  said  Bill  Clay- 
brook,  an  analyst  at  Aberdeen 
Group  Inc.  in  Boston.  U 


Sherwin-Williams  Brushes 
SCO  Unix  Aside,  Adopts  Linux 


Will  deploy  IBM  PCs 
running  Turbolinux 
at  2,500  paint  stores 


BY  TODD  R.  WEISS 

Sherwin-Williams  Co.  is  de¬ 
ploying  IBM  PCs  running  the 
Turbolinux  operating  system 
to  replace  SCO  Unix-equipped 
systems  throughout  its  2,500 
stores  across  North  America. 

In  an  announcement  last 
week,  the  Cleveland-based 
paint  manufacturer  and  retail¬ 
er  said  it’s  moving  to  Linux  and 
IBM  to  upgrade  its  point-of- 
sale  and  in-store  operations, 
while  minimizing  its  transition 
costs  from  established  Unix 
systems. 

Under  the  multimillion-dol- 
lar  deal  —  the  exact  value  of 
which  isn’t  being  released  — 
IBM  will  install  about  9,700  of 
its  M41  NetVista  desktops, 


along  with  monitors,  printers, 
cash  drawers  and  related  prod¬ 
ucts,  in  Sherwin-Williams’ 
stores,  said  Peter  Neilsen,  a 
Linux  executive  at  IBM  Global 
Services.  The  new  Turbolinux- 
equipped  systems  will  run  all 
store  functions,  including  cus¬ 
tomer  transactions,  inventory 
and  software  applications  used 
for  paint  mixing  and  tinting. 
One  PC  will  be  con¬ 
figured  as  an  in¬ 
store  server  at  each 
location. 

Bill  Thompson, 
director  of  IT  at 

Sherwin-Williams’  _ 

Paint  Stores  Group, 
said  in  a  statement  that  the 
new  systems  will  allow  an  easy 
transition  from  The  Santa 
Cruz  Operation  Inc.’s  (SCO) 
Unix  systems.  SCO,  formerly  a 
leader  in  the  Unix  business, 
was  purchased  by  Caldera  In¬ 
ternational  Inc.  in  Lindon, 
Utah,  in  August  2000. 


LINUX  LOWDOWN 

For  more  about  Linux,  visit 
our  Knowledge  Center: 

O  QuickLink:  a2080 
www.computerworld.com 


Blake  Stowell,  a  Caldera 
spokesman,  said  the  company 
is  disappointed  about  losing 
Sherwin-Williams’  Unix  busi¬ 
ness.  However,  he  said  the 
paint  company  remains  a  cus¬ 
tomer  and  “hasn’t  closed  the 
door  on  Caldera.” 

Sherwin-Williams  and  Cal¬ 
dera  are  engaged  in  talks  about 
using  Caldera’s  Volution  man¬ 
agement  application  within 
the  new  systems  being  de¬ 
ployed,  he  said. 

Sherwin-Williams’  IT  staff 
designed  and  developed  the 
new  systems  and  has  ported 
the  company’s  proprietary  ap¬ 
plications  to  Linux 
from  Unix.  The 
company’s  IT  staff 
will  work  with  500 
to  1,000  IBM  Global 
Services  employees 

_  who  will  assist  in 

the  deployment, 
which  will  begin  in  July  and  be 
completed  in  the  second  quar¬ 
ter  of  2003. 

Jonathan  Eunice,  an  analyst 
at  Illuminata  Inc.  in  Nashua, 
N.H.,  said  the  deal  is  important 
because  it  shows  “the  main- 
streaming  of  Linux”  inside  a 
large  retail  operation.  I 
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Guardian' 14000 


Dual  Gigabit  Ethernet 


Specs  •  1.4TB  •  3U  •  Dual  Gigabit  Ethernet 

•  Supports  Windows/  UNIX/Linux/Macintosh 
Environments  •  journaling  File  System 

•  Standard  On-site  Support 

Security/Management  •  Microsoft  ADS 

•  UNIX  NIS  •  SNMP  •  SSL  •  SSH 

•  Quotas  for  Users  and  Groups1  •  File  and  Folder 
Security  for  Users  and  Groups  *  Kerberos  Authentication 

Availability  •  RAID  5,1,0  •  12  Hot-swappable  Disk  Drives  •  Redundant, 
Hot-swappable  Power  Supplies  and  Cooling  Fans  •  Dual  Ethernet  for 
Load  Balancing  and  Failover  •  Dual  Power  Cords 

Data  Protection  •  Snapshots  •  Backup  Agent  Support  (VERITAS  NetBackup 
and  Backup  Exec,  CA  ARCserve,  Legato  NetWorker)  •  Server-to-Server  (S2S) 
Synchronization  Software  •  Local  Backup  via  SCSI  Port  ’  •  APC  Smart-UPS  Support 

•  Unlimited  User  License  PowerQuest  DataKeeper  (for  Windows  Client  Backup ) 


1.4TB/3U...under  $25,000 

The  new  Quantum  Guardian™  14000  server  eliminates  cost 
and  complexity  from  your  storage  infrastructure.  Deployment 
is  quick  and  easy,  with  no  downtime.  That  should  save  some 
headaches.  And  the  low  acquisition  cost  combined  with  its 
high  availability  and  minimal  administration  helps  you  live 
within  your  budgets.  Yet  you  still  enjoy  the  enterprise-class 
security,  management  and  performance  your  environment 
demands.  The  new  Quantum  Guardian  ™  14000  servers... 
building  blocks  for  simple,  scalable  storage  growth.  Visit 
www.quantum.com/Guarclianl4000  for  an  interactive  demo. 


Quantum 


1.888.343.7627  •  www.quantum.com 
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♦  Introducing  Microsoft  Project  Server  2002,  the  newest  way  to  manage  your  enterprise 


4 

organizational  level  Today’s  complex  projects  have  grown  to  encompass  multiple  departments,  organizations,  and 
geographies,  which  means  visibility  and  collaboration  are  more  essential  than  ever.  Part  of  the  MicrosoftK  .NET 
|  family  of  servers,  Microsoft  Project  Server  2002  works  with  Microsoft  Project  Professional  2002  to  help  you  manage 
resources  and  model  projects  across  your  portfolio.  Web-based  access  to  project  information  keeps  everyone  in  the 
%  loop,  at  any  time  and  from  anywhere.  And  the  open  architecture  in  Microsoft  Project  Server  2002  allows  you  to  deploy 
%,  a  customized,  secure,  enterprise-scale  project-management  solution  that  integrates  with  your  current  business 
Pi  systems.  So  even  when  there  are  lots  of  hands  on  the  job,  they’re  still  of  one  mind. 

Find  out  how  Microsoft  Project  Server  2002  can  help  you  manage  projects  across  M 

your  organization.  Go  to  goprojectserver.com  Software  for  the  Agile  Business  fsff; '  ■  - 
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l  AI  Vendors  Add  More 
Support  for  Web  Services 


Tibco,  Vitria  tie  emerging  technology 

to  business  process  integration  tools 


BY  MICHAEL  MEEHAN 

urthering  their  de¬ 
livery  of  Web  ser¬ 
vices  support  to  cor¬ 
porate  users,  integra¬ 
tion  software  rivals 
Tibco  Software  Inc.  and  Vitria 
Technology  Inc.  last  week  re¬ 
leased  tools  that  combine  the 
emerging  technology  with 
business  process  management 
capabilities. 

Analysts  said  the  latest  an¬ 
nouncements  reflect  a  move 
by  enterprise  application  inte¬ 
gration  (EAI)  vendors  to  offer 


bona  fide  mission-critical  Web 
services  technology.  And  some 
users  are  already  taking  the 
new  offerings  and  using  them 
in  integration  projects. 

For  example,  Denver-based 
Qwest  Communi¬ 
cations  Interna¬ 
tional  Inc.  said 
that  it  plans  next 
month  to  launch  an  integra¬ 
tion  framework  that  links  its 
internal  order  entry,  service 
assurance,  customer  relation¬ 
ship  management,  billing  and 
inventory  systems.  Using  new 


tools  from  Palo  Alto,  Calif.- 
based  Tibco,  all  of  the  data  in 
those  systems  will  be  made 
available  via  Web  services. 

Tibco  announced  the  addi¬ 
tion  of  Web  services  support  to 
its  business  process  manage¬ 
ment  software,  which  lets 
users  coordinate  automated 
transaction  processes  and 
workflows  across  applications. 

The  software  ven¬ 
dor  said  it 
has  now  complet¬ 
ed  an  initiative  to 
blend  Web  services  functional¬ 
ity  into  its  entire  EAI  suite. 

Meanwhile,  Sunnyvale, 
Calif. -based  Vitria  released 
Version  2.0  of  a  similar  Web 
services  module  for  its  busi¬ 


ness  process  management  in¬ 
tegration  software  (see  box). 

Seattle-based  CapitalStream 
Inc.,  a  company  that  processes 
business  credit  data  for  finan¬ 
cial  institutions,  used  a  beta- 
test  version  of  Tibco’s  new 
Web  services  tool  to  create  di¬ 
rect  links  between  an  online 
credit  application  form  and  the 
back-end  approval  mechanism. 

The  project,  carried  out  with 
Walnut  Creek,  Calif.-based 
Bank  of  the  West  Inc.,  was 
completed  in  February. 

By  eliminating  the  need  to 
re-enter  data  and  streamlining 
workflows,  the  links  have  in 
some  cases  helped  cut  applica¬ 
tion  processing  times  from  five 
days  to  just  one,  said  Jeff  Dirks, 


WEB  SERVICES 


Colleges  Learn  Advantages 
Of  Using  Commercial  E-Mail 


Schools  switching 
from  customized 
messaging  systems 

BY  JENNIFER  DlSABATINO 

Freeware  and  a  lot  of  IT  man¬ 
agement  creativity  have  tradi¬ 
tionally  fueled  college  messag¬ 
ing  systems.  But  that’s  chang¬ 
ing  as  some  universities  look 
to  off-the-shelf  applications  to 
reduce  maintenance  work  and 
provide  better  security. 

Within  the  past  year,  several 
colleges  and  universities  have 
switched  from  their  old,  cus¬ 
tom-configured  e-mail  sys¬ 
tems  to  commercial  products. 
However,  they’re  not  buying 
the  same  e-mail  systems  pre¬ 
ferred  by  large  corporations. 
Instead,  they’re  moving  to 
thin-client  and  Web-based  ap¬ 
plications  that  can  run  tens  of 
thousands  of  user  e-mail  ac¬ 
counts  on  a  single  server. 

It  usually  [was]  sort  of  a 


cobbled-together  thing,”  said 
Matt  DeFoor,  directory  engi¬ 
neer  at  the  University  of  Ken¬ 
tucky  in  Lexington.  For  exam¬ 
ple,  his  school  previously  used 
the  freeware  version  of  send- 
maii  Simple  Mail  Transfer 
Protocol  software  and  San 
Diego-based  Qualcomm  Inc.’s 
freeware  product,  Qpopper.  It 
lets  messages  be  downloaded 
to  e-mail  client  software  such 
as  Qualcomm’s  Eudora  or  Mi¬ 
crosoft  Corp.’s  Outlook. 

Last  summer,  DeFoor  said, 
he  replaced  that  setup  with  In¬ 
ternet  messaging  software  de¬ 
veloped  by  Novell  Inc.  and  five 
of  Dell  Computer  Corp.’s  Win¬ 
dows-based  PowerEdge  6450 
servers.  The  university  now 
has  more  than  30,000  user  ac¬ 
counts  on  the  Novell  Internet 
Messaging  System  software, 
which  is  being  renamed  Net- 
Mail  as  part  of  an  upgrade 
that’s  due  out  next  month. 

DeFoor  spread  the  e-mail  ac¬ 
counts  across  the  five  Dell 


servers  for  redundancy  and 
performance  reasons  but  said 
he’s  now  considering  putting 
all  the  accounts  on  one  server. 

Management  oversight  is 
much  simpler  than  it  wras  on 
the  old  system,  according  to 
DeFoor.  And  the  Internet 
messaging  software  is  much 
less  expensive  than  a  full- 
fledged  corporate  e-mail  sys¬ 
tem  would  be.  Kentucky  has 
to  pay  only  6  cents  per  user 
mailbox  for  its  Novell  ac¬ 
counts,  DeFoor  said. 

Specialized  commercial 


We  don’t  have  to 
worry  about  setting 
up  a  client  [applica¬ 
tion]  at  this  comput¬ 
er  at  this  campus,  or 
that  computer  at 
that  campus. 

ROY  TEAHEN,  DIRECTOR  OF 
INTERNET  APPLICATIONS  AND 
SYSTEMS,  BAKER  COLLEGE 


e-mail  applications  also  have  a 
lower  total  cost  of  ownership, 
said  Roy  Teahen,  director  of 
Internet  applications  and  sys¬ 
tems  at  Baker  College,  a  Flint, 
Mich.-based  school  that  oper¬ 
ates  a  dozen  campuses. 

Until  last  year,  Teahen  said, 
Baker  used  a  combination  of 
freeware  code  and  in-house 
programming  to  run  its  e-mail 
system.  Now,  the  school  has 
37,000  user  accounts  on  a  clus¬ 
tered  pair  of  specialized  e-mail 
servers  made  by  Sunnyvale, 
Calif.-based  Mirapoint  Inc. 

One  server  runs  the  e-mail 
system,  while  the  other  acts  as 
a  backup  machine,  Teahen 
said.  Messages  are  stored  and 
routed  by  Mirapoint-devel- 
oped  software  and  accessed 
through  Web  browsers. 

“We  don’t  have  to  worry 
about  setting  up  a  client  [appli¬ 
cation]  at  this  computer  at  this 
campus,  or  that  computer  at 
that  campus,  or  setting  up  a 
laptop  [for  a  professor]  to  go  to 
a  conference,”  Teahen  said. 
“That’s  all  gone  now.”  I 


MORE  THIS  ISSUE 

Novell  looks  to  boost  its  e-mail  software 
business  with  its  planned  NetMail  upgrade. 
Read  more  on  page  21. 


AT  A  GLANCE 


Two  for  One 

The  rival  Web  services  integra¬ 
tion  tools  released  by  Tibco 
and  Vitria  can  do  the  following: 

CREATE  Web  services  based  on  existing 
applications  with  no  new  coding. 

INCORPORATE  Web  services  into  multi¬ 
system  business  transactions. 

PROVIDE  access  to  Web  service-based 
data  via  Web  portals  and  wireless  devices. 

MANAGE  AND  MONITOR  Web  services 
applications  and  components. 

CapitalStream’s  president. 

It  would  be  impractical  for 
CapitalStream  to  try  to  recast 
an  entire  20-step  online  appli¬ 
cation  process  with  Web  ser¬ 
vices  technology,  Dirks  said. 
But  Web  services  can  be  used 
to  streamline  certain  parts  of 
the  procedure,  he  added. 

“The  whole  process  doesn’t 
have  to  be  Web  service-en¬ 
abled,  just  one  piece  of  it,” 
Dirks  said.  “That  way,  we  can 
be  strategic  about  how  we  use 
the  technology  and  only  imple¬ 
ment  it  when  we  can  define  a 
clear  return  on  investment.” 

New  Role  for  EAI  Vendors 

While  Web  services  technol¬ 
ogy  such  as  Simple  Object  Ac¬ 
cess  Protocol  messaging  and 
the  Web  Services  Description 
Language  might  make  it  easy 
for  users  to  expose  application 
interfaces  on  their  own,  An¬ 
drea  Eubanks,  Tibco’s  director 
of  products,  said  EAI  vendors 
can  still  play  a  role  in  coordi¬ 
nating  integration  processes 
and  linking  to  legacy  systems. 

But  the  use  of  Web  services 
links  does  mark  a  departure 
from  the  messaging  roots  of  in¬ 
tegration  middleware,  Eubanks 
added.  “Messaging  is  just  a 
pipeline,”  she  said.  “We’re  no 
longer  saying  our  way  is  better 
than  anyone  else’s.” 

Tyler  McDaniel,  an  analyst 
at  Hurwitz  Group  Inc.  in  Fram¬ 
ingham,  Mass.,  said  Web  ser¬ 
vices  may  initially  be  used 
more  as  an  integration  tech¬ 
nology  than  as  a  component  of 
business-to-business  applica¬ 
tions.  They  give  EAI  vendors 
the  ability  to  target  tactical  de¬ 
ployments  by  users  instead  of 
massive  and  expensive  enter¬ 
prisewide  projects,  he  noted.  I 


Blistering  acceleration. 
Easy  to  manage. 


Meet  The  Alteon 
Security  Cluster. 


Who  says  you  need  to  trade  off  network  security  to  get  better  network 
performance?  With  the  award-winning  Nortel  Networks™  Alteon™ 
Security  Cluster,  you  can  turboboost  your  network  with  a  multigigabit 
peT  second  acceleration  platform  that's  scalable  and  incredibly  easy  to 
manage  and  deploy.  There  are  many  powerful  security  applications 
to  the  cluster  To  begin  with,  the  Alteon  Switched  Firewall  provides 
up  to  3.2  Gbps  throughput  and  500,000  concurrent  sessions. 
And  the  Alteon  SSL  Accelerator 
proved  its  transaction  per  second 
power  in  real-life  testing  and 

garnered  the  Editor's  Choice  award  from  Network  Computing  magazine 


Network  Computing 
Editor's  Choice.* 


for  being  the  best  performing,  best  featured  and  best  priced  product 
on  the  market.  Our  complete  line  of  L4-7  switching  and  application 
products  gets  rave  reviews  from  the  industry.  So,  if  you  want  to  maximize 
Tetum  on  your  capital  investment  and  boost  your  network  to  new  levels 
of  performance,  we  can  help  you  do  it  with  blistering  acceleration 
To  learn  more,  visit  nortelnetworks.com/alteonsecurity. 


Nortel  Networks,  the  Nortel  Networks  logo,  the  Globemark  and  Alteon  are  all  trademarks  of  Nortel 
Networks.  ©2002  Nortel  Networks.  All  rights  reserved.  ’Network  Computing,  June  11. 2001 
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Microsoft  Warns  of 
Debugger  Flaw . . . 

Microsoft  Corp.  warned  that  a  secu¬ 
rity  hole  in  the  authentication  mech¬ 
anism  used  by  a  debugging  tool  in¬ 
cluded  in  Windows  NT  4.0  and  Win¬ 
dows  2000  could  allow  attackers  to 
run  malicious  code,  delete  data  or 
make  configuration  changes  on  un¬ 
protected  servers.  Microsoft  gave 
the  flaw  a  “critical”  severity  rating 
and  urged  systems  administrators 
to  install  a  new  patch. 


. . .  While  Cisco  Says 
IP  Phones  at  Risk 

Cisco  Systems  Inc.  disclosed  that  it 
has  identified  several  security  flaws 
in  its  line  of  IP  telephones,  including 
one  that  leaves  the  devices  vulnera¬ 
ble  to  denial-of-service  attacks.  Cis¬ 
co  said  attackers  could  also  take 
control  of  its  IP  Phone  7910, 7940, 
and  7960  models  and  modify  con¬ 
figurations  if  the  products  are  left 
unprotected.  The  company  issued  a 
patch  to  plug  the  holes. 

Intel  Buys  Optical 
Network  Technology 

Intel  Corp.  agreed  to  acquire  tun¬ 
able  laser  technology  from  San 
Jose-based  New  Focus  Inc.  as  part 
of  a  plan  to  develop  optical  net¬ 
working  components  that  cost  less 
than  current  devices.  Intel  said  it’s 
paying  New  Focus  about  $50  mil¬ 
lion  for  the  laser  technology,  which 
is  designed  to  help  optical  trans¬ 
ceivers  increase  the  bandwidth  of 
fiber  networks. 


Short  Takes 

Andover,  Mass.-based  investment 
firm  CMGI  INC.  said  it  plans  to  buy 
full  ownership  of  its  ENGAGE  INC. 
subsidiary.  CMGI  currently  owns 
75%  of  Engage,  an  Andover-based 
developer  of  marketing  software. 

. . .  Hoofddorp,  Netherlands-based 
network  services  firm  KPNQWEST 
NV  filed  for  bankruptcy  protection 
under  Butch  law. 


NEWS 

Worm  Threatens 
SQL  Server  Accounts 


Microsoft  urges  use  of  previously  released 
patch  and  beefed-up  password  protection 


BY  JAIKUMAR  VIJAYAN 

ECURITY  ANALYSTS 
last  week  warned  of 
a  self-propagating 
worm  targeting  Mi¬ 
crosoft  Corp.’s  SQL 
Server  software. 

The  worm,  called  SQLSnake, 
scans  for  and  attacks  Internet- 
connected  SQL  Server  ac¬ 
counts  that  aren’t  protected  by 
administrative  passwords.  Once 
it  infects  the  server,  it  exports 
all  user  passwords  on  that 
server  to  an  external  e-mail  ac¬ 
count,  said  Elias  Levy,  chief 
technology  officer  at  Security- 
Focus  in  San  Mateo,  Calif. 

SQLSnake  also  uses  the 
compromised  machine  to  simi¬ 
larly  infect  other  vulnerable 
SQL  servers,  Levy  said.  “It  is 
not  exploiting  any  new  vulner¬ 
ability.  It  is  just  looking  for  ad¬ 
ministrative  accounts  with  no 
passwords,”  he  said. 

The  emergence  of  the  worm 
and  of  malicious  code  that 
takes  advantage  of  previous 
vulnerabilities  in  SQL  Server 
make  it  important  for  users  to 
deploy  a  patch  that  Microsoft 
had  previously  released  for 
SQL,  a  Microsoft  spokesman 
said.  “Microsoft  is  advising 
SQL  Server  users  to  take  action 
to  protect  themselves  against 
attacks  that  seek  to  exploit 
blank  passwords  and  a  [sepa¬ 
rate]  vulnerability  addressed 
with  Microsoft  Security  Bul¬ 
letin  MS02-020,”  the  spokes¬ 
man  said. 

Analysts  were  first  alerted 
about  the  worm  last  Monday, 
after  a  huge  weekend  increase 
in  scanning  activity  for  port 
1433,  which  is  commonly  used 
by  Microsoft’s  SQL  Server. 

“We’ve  been  watching  re¬ 
connaissance  activity  against 
Microsoft’s  SQL  Server  for  the 
past  nine  months,”  said  Tim 
Belcher,  chief  technology  offi¬ 


cer  at  Riptech  Inc.,  an  Alexan¬ 
dria,  Va. -based  managed  ser¬ 
vice  service  provider. 

But  the  scanning  activity  in¬ 
creased  by  90%  over  the  week¬ 
end  and  a  further  hundredfold 
from  Monday  to  Tuesday  of 
last  week,  he  said. 


SecurityFocus  has  received 
reports  of  about  1,600  systems 
that  have  been  infected,  with 
that  number  growing  by  about 
100  every  hour,  Levy  said. 


Software  enforces 
IT  usage  policies 

BY  JAIKUMAR  VIJAYAN 

Mountain  View,  Calif.-based 
security  vendor  Polivec  Inc. 
last  week  introduced  a  product 
to  automate  the  process  of 
monitoring  and  enforcing  cor¬ 
porate  security  policies. 

Using  Polivec  Enforcer,  se¬ 
curity  administrators  will  be 
able  to  monitor  a  network  for 
user  actions  or  system  config¬ 
urations  that  violate  an  organi¬ 
zation’s  stated  security  policy, 
according  to  the  company. 

The  release  is  one  of  an  in¬ 
creasing  number  of  products 
that  address  a  growing  need 
for  tools  to  help  administer 
and  enforce  IT  usage  policies, 
users  and  analysts  said. 

Policy  automation  should 
help  companies  continuously 
monitor  the  security  status  of 
their  organization  and  systems, 
said  Clint  Kreitner,  president 


“This  is  a  potent  worm,  and 
it  is  propagating  with  impres¬ 
sive  speed.  If  you  are  running  a 
misconfigured  SQL  Server,  you 
are  likely  to  be  compromised 
very  shortly,”  Belcher  said. 

SQLSnake  isn’t  as  big  a 
threat  to  the  Internet  infra¬ 
structure  as  Code  Red  and 
Nimda  were,  because  there  are 
fewer  SQL  Servers  on  the  In¬ 
ternet  than  there  are  Microsoft 
Internet  Information  Servers, 
which  were  targeted  by  those 
previous  worms,  Belcher  said. 

Users  can  mitigate  exposure 
by  blocking  Internet  access  to 
port  1433,  according  to  an  alert 
posted  by  Russ  Cooper,  mod¬ 
erator  of  the  NTBugTraq  mail- 


of  The  Center  for  Internet  Se¬ 
curity,  a  nonprofit  in  Bethesda, 
Md.,  that  helps  corporations 
with  security-related  issues. 

Such  monitoring  can  extend 
all  the  way  down  to  the  proper 
configuration  of  workstations, 
servers,  routers,  firewalls  and 
switches  at  the  detailed  opera¬ 
tional  level,  he  said. 

The  Air  Academy  Federal 
Credit  Union  in  Colorado 
Springs  is  using  Enforcer  from 
Mountain  View,  Calif. -based 
Polivec  to  do  many  of  those 
things.  The  credit  union  now 


How  They  Work 


SECURITY  POLICY 
MANAGEMENT  TOOLS: 

INSTALL  agents  in  client  systems 

GATHER  usage,  configuration, 
password  and  other  management 
information  with  the  agents 

ENFORCE  access  controls, 
usage  permissions,  strong  pass¬ 
word  controls  and  other  policies 


Tools  Focus  on  Automated 
Security  Policy  Management 
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WHAT  TO  DO 


■  SECURE  your  systems  administrator 
log-in  account  with  a  non-NULL  password. 


■  BLOCK  port  1433  at  your  Internet  gate¬ 
ways  and/or  assign  SQL  Server  to  listen 
on  an  alternate  port. 


■  If  port  1433  needs  to  be  available  on 
your  Internet  gateways,  ENABLE  egress/ 
ingress  filtering  to  prevent  misuse  of 
this  port. 


ing  list.  It’s  also  important  to 
ensure  that  the  administrator 
account  has  a  password  and  to 
disable  TCP/IP  network  li¬ 
braries  if  you’re  not  using 
them,  he  added. 

Also,  review  the  configura¬ 
tion  and  installation  of  systems 
that  may  be  inadvertently  run¬ 
ning  SQL  Server  and  disable 
unnecessary  deployment,  Rip¬ 
tech  said  in  its  advisory. 

And  Microsoft  recommend¬ 
ed  using  strong  authentication 
for  access  control.  I 


gets  automatic  alerts  if  usage 
policy  is  breached.  Security 
flaws  such  as  nonsecure  user 
passwords,  faulty  or  inade¬ 
quate  patches,  and  unautho¬ 
rized  changes  to  configuration 
or  registry  settings  all  trigger 
alerts  to  the  systems  adminis¬ 
trator,  said  Butch  Hill,  vice 
president  of  IT  at  the  Air  Acad¬ 
emy  Federal  Credit  Union.  The 
alerts  are  pushed  up  the  man¬ 
agement  chain  if  they  aren’t 
acted  upon  within  preset  time 
limits. 

“It’s  been  really  useful 
for  us,”  Hill  said. 

Volvo  Finance  North  Ameri¬ 
ca  in  Montvale,  N.J.,  uses  con¬ 
figuration  management  soft¬ 
ware  from  Configuresoft  Inc. 
in  Woodland  Park,  Colo.,  to 
ensure  policy  compliance.  The 
software  also  helps  monitor 
patches,  set  access  permis¬ 
sions,  randomly  change  ad¬ 
ministrator  passwords  and 
monitor  the  network  for  con¬ 
figuration  changes  that  might 
cause  a  breach. 

Configuresoft’s  software  lets 
companies  bring  everything 
into  compliance  and  manage 
security  policies  more  effi¬ 
ciently,  said  Anthony  DeVoto, 
a  Windows  NT  systems  ad¬ 
ministrator  at  Volvo  Finance.  t 


greater  than  /  abbrev:  > 

You  know  just  as  good  isn't  good  enough.  Today's  leading  companies  have  to  be  greater  than  the  competition 
by  a  wide  margin.  At  Sprint,  we've  got  the  network,  the  people  and  the  services  that  can  help  you  build 
unequalled  and  sustainable  competitive  advantage. 

An  intelligent  network 

Advantage  one:  our  network.  It  was  built  from  the  ground  up  as  a  unified  whole.  (No  technological  patchwork 
here.)  That  means  we  deliver  unsurpassed  reliability  and  interoperability,  so  you  can  leverage  existing 
investments  in  systems  and  applications  and  migrate  to  our  latest  and  greatest  technology  —  like  3G  mobile 
solutions  for  greater  productivity  —  when  you're  ready.  In  fact,  we're  the  only  provider  that  owns  and  operates 
both  its  own  nationwide  wireless  and  wireline  access  to  your  critical  data  apps. 


A  network  of  intelligence 

Advantage  two:  our  people  and  services.  We  have  over  2,200  technical  and  support  professionals,  including 
1,500  trained  engineers.  Plus,  we're  an  industry  leader  in  on-staff  Cisco  Certified  Technicians  and  Certified 
Security  Specialists.  So  what  are  all  these  people  doing?  Answering  your  questions.  Building  your  customized 
applications.  And  working  to  help  ensure  your  systems  are  safe  and  secure. 


Greater  competitive  advantage  —  another  sign  of  an  intelligent  network  and  the  people  who  make  it 
work  (for  you). 


For  more  ideas  on  building  competitive  advantage,  access  our  library  of 
white  papers  at  sprint.com/whitepapers/11  or  call  1-877-519-1709. 
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Continued  from  page  1 

Navy 

Still,  the  massive  project 
has  been  fraught  with  delays 
and  implementation  problems, 
demonstrating  the  difficulties 
enterprises  stand  to  encounter 
when  undertaking  large-scale 
outsourcing  plans. 

For  example,  in  a  global 
organization  like  the  Navy, 
which  insiders  describe  as  a 
conglomeration  of  hundreds  of 
IT  fiefdoms,  attaining  enter¬ 
prisewide  buy-in  to  the  type  of 
cultural  change  that  N/MCI 
would  bring  has  proved  to  be 
difficult  at  best. 

“The  goals  and  success  of 


the  enterprise  as  a  whole  . . . 
necessarily  take  precedence 
over  individual  desires,”  states 
the  order  issued  last  week  by 
N/MCI  director  Rear  Adm. 
Charles  Munns,  a  copy  of 
which  was  obtained  by  Com- 
puterworld. 

Project  Backlash 

But  what  some  insiders 
characterize  as  a  mismanaged, 
overzealous  deployment  plan 
has  produced  a  backlash  from 
Navy  IT  managers  and  claims 
that  users  are  unable  to  do 
their  jobs  effectively. 

The  N/MCI  deployment 
schedule  has  moved  IT  sup¬ 
port  for  existing  systems  that 
users  need  to  do  their  jobs  to 
last  on  the  priority  list,  said  an 


N/MCI  Installation  Plan  by  June  30 


*  Naval  Air  Station  (NAS), 
Patuxent  River,  Md. 

3,800  SEATS 

■  NAS,  Lemoore,  Calif. 

3,000  SEATS 

*  Naval  Surface  Warfare 
Center,  Port  Hueneme,  Calif. 
2,453  SEATS 

*  HQ  Space  and  Naval 
Warfare  Systems  Command, 
San  Diego 

1,562  SEATS 

a  HQ  Commander-in-chief 
Atlantic  Fleet,  Norfolk,  Va. 
1,350  SEATS 

®  Naval  Air  Warfare  Center  Train¬ 
ing  Systems  Division,  Orlando 
1,200  SEATS 

*  Washington  Navy  Yard, 
Washington 

1,083  SEATS 

a  Naval  Surface  Warfare 
Center,  Crane,  Ind. 

1,000  SEATS 

*»  Navy  HQ  Offices, 

Crystal  City,  Va. 

876  SEATS 

b  Navy  HQ,  Pentagon 
832  SEATS 

*  NAS,  Fallon,  Nev. 

800  SEATS 

*  Naval  District  Washington 
(NDW)  Nebraska  Avenue 
Complex,  Washington 
748  SEATS 


»  NAS,  Atlanta 

663  SEATS 

«  Naval  Air  Reserve, 

Point  Mugu,  Calif. 

307  SEATS 

*  NDW  Anacostia  Annex, 
Washington 

276  SEATS 

*  Naval  Reserve  Center, 

Fort  Worth,  Texas 

164  SEATS 

*  Naval  Reserve  Center, 

New  Orleans 

114  SEATS 

«  HQ  Naval  Reserve  Readiness 
Command  South,  Fort  Worth 
77  SEATS 

*  Naval  Reserve  Center, 
Shreveport,  La. 

65  SEATS 

■  Naval  Reserve  Center, 

San  Antonio 

42  SEATS 

■  Naval  Reserve  Center, 

Baton  Rouge,  La. 

38  SEATS 

«  Naval  Reserve  Center, 
Lubbock,  Texas 

34  SEATS 

*  Naval  Reserve  Center, 
Amarillo,  Texas 

28  SEATS 


TOTAL:  20,513  SEATS 


IT  support  manager  at  the 
Naval  Air  Systems  Command 
(Navair)  in  Patuxent  River,  Md. 

“It  used  to  be  that  the  cus¬ 
tomer  always  comes  first.  Now, 
it’s,  ‘We  don’t  care  what  the 
customer  says;  just  go  out  and 
get  [N/MCI]  done,’  ”  the  IT 
support  manager  said. 

“N/MCI  is  all  take  and  no 
give,”  said  a  systems  adminis¬ 
trator  for  the  Navy’s  Southwest 
region,  which  includes  naval 
air  stations  in  Lemoore,  Calif., 
and  Fallon,  Nev.  “They  are  not 
set  up  to  be  service-oriented,” 
he  noted,  adding  that  he  has 
been  waiting  for  more  than 
eight  weeks  for  the  N/MCI 
program  office  to  approve  a 
simple  client/server  software 
maintenance  release. 

“I  cannot  get  any  informa¬ 
tion  from  [EDS]  that  indicates 
what  anyone  is  doing  with  my 
software  submittal,”  the  ad¬ 
ministrator  said.  “As  a  result,  I 
cannot  tell  my  customers 
when  it  will  be  released.” 

Six  N/MCI  insiders  contact¬ 
ed  by  Computerworld  last 
week  requested  anonymity  out 
of  fear  of  losing  their  jobs.  The 
Navy  and  EDS  declined  to 
respond  directly  to  comments 
from  anonymous  sources.  But 
John  Clendening,  an  EDS 
spokesman,  said  that  despite 
the  few  detractors  who  are 
resistant  to  change,  “the 
[N/MCI]  program  is  on  solid 
footing.” 

Double-Edged  Sword 

The  N/MCI  blade  indeed 
cuts  both  ways,  said  an  EDS 
engineer  who  works  at  the 
Patuxent  River  air  station. 
“The  people  at  Navair  are  very 
smart  and  resourceful,  and  if 
they  wanted  N/MCI,  it  would 
already  be  in  [place]  and  work¬ 
ing  smoothly,”  the  EDS  source 
said.  According  to  the  source, 
because  of  repeated  work  stop¬ 
pages  ordered  by  local  Navair 
brass  who  have  cited  remote 
access,  security  and  help  desk 
concerns  [QuickLink:  29843], 
it  has  taken  two  years  to  de¬ 
ploy  1,000  seats  —  a  project 
that  should  have  taken  90  days. 
“They  have  just  been  fighting 
N/MCI  so  long,  it  has  become 
a  passion,”  the  EDS  source  said. 

The  Navy  deployment  order 
now  requires  any  work  stop- 


N/MCI  Site  Rollout  Leadership  Team 


Site  Commander 

Tactical  Control 
(Local  Navy  Officer) 


Leads  the  N/MCI  site  : 
j  Rollout  Leadership  Team.  : 

I  Functions  similarly  to  a  j 
i  ship’s  superintendent  in  the  j... 
|  shipyard  repair  business  i 

N . J 


Site  Integration  Leader 

(Navy  N/MCI 
Program  Office) 


r . J . a 

;  Comprised  of  EDS’s  ; 
;  Local  N/MCI  Informa-  j 
i  tion  Strike  Force  I 

N . J 


r . . . J . N 

Acts  as  single,  authoritative  user 
i  representative.  Supports  Site  Commander  i 
i  by  directing,  coordinating  and  reporting  \ 
status  of  vendor  requirements  and 
transition  checklists. 

N . . . J 


pages  to  be  approved  by  Munns. 
In  addition,  local  site  leader¬ 
ship  teams  have  been  estab¬ 
lished  to  ensure  that  deadlines 
are  met  (see  box). 

But  the  real  concern  lies  in 
dealing  with  technical  prob¬ 
lems  associated  with  existing 
systems,  said  the  IT  support 
manager  at  the  Patuxent  River 
air  station.  In  addition  to  a 
purchasing  ban  on  new  equip¬ 
ment  and  software  outside  of 
N/MCI,  which  prevents  users 
from  upgrading,  repair  re¬ 
quests  for  existing  systems  are 
piling  up  because  support  per¬ 
sonnel  are  being  asked  to  work 
on  N/MCI  deployment  issues. 


Navy  and  EDS  insiders  also 
point  to  technical  delays  stem¬ 
ming  from  the  Navy’s  80,000- 
plus  legacy  applications,  many 
of  which  must  be  installed  on 
kiosks  outside  of  the  intranet 
because  they  haven’t  passed 
security  testing  or  don’t  run  on 
Windows  2000. 

“The  legacy  applications 
[challenge]  is  something  the 
Navy  did  not  understand  when 
it  started  the  N/MCI  effort,” 
said  Navy  Capt.  Chris  Christo¬ 
pher,  in  a  recent  interview. 

“We’ve  since  started  a  Navy 
application  database  task  force. 
Kiosks  are  part  of  the  transi¬ 
tion,”  Christopher  said.  I 


It  used  to  be  that  the 
customer  always  comes  first. 
Now,  it’s,  ‘We  don’t  care 
what  the  customer  says; 
just  go  out  and 
get  [N/MCI]  done.’ 

UNIDENTIFIED  IT  SUPPORT  MANAGER, 

NAVAL  AIR  SYSTEMS  COMMAND 
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As  markets  sag  and  budgets  shrink,  we  know  you're  trying  to  do  more  and  more  with  less  and  less.  So  here  are 
just  a  few  ways  Sprint  can  help  you  create  more  value  for  a  lot  less  (less  hassle,  less  time,  less  waste,  less 
money  —  you  get  the  picture). 

One  source  from  voice  to  data  to  wireless 

Sprint  gives  your  business  the  advantage  of  one  single  point  tif  contact  domestically  and  globally  for  voice,  data, 
Internet  and  managed  services.  Our  integrated  approach  means  everything  works  together  to  help  you  lower 
your  administrative  and  management  costs. 

Second  to  none  in  network  reliability 

Our  self-healing  SONET  ring  architecture  provides  99.999%  reliability.  (It  doesn't  get  much  better  than  that.)  In 
fact,  Sprint's  long  distance  network  had  the  fewest  FCC-reportable  outages  of  the  top  three  major  competitors 
for  the  sixth  straight  year.  So  you  get  the  virtually  error-free  data  and  voice  transmissions  that  help  ensure  your 
customers'  loyalty  and  your  company's  bottom  line. 

Customized  integration 

Sprint  lets  you  leverage  the  investment  you've  already  made  in  most  existing  systems  and  applications.  But 
when  you're  ready  to  move  to  new  technology,  we've  made  it  faster  and  more  affordable  by  investing  in 
interoperable  product  platforms.  (Our  network  boasts  seamless  interoperability  between  IP,  Frame  Relay  and 
ATM  platforms.)  And  using  existing  network  solutions  and  equipment  while  you  adopt  new  technologies  can 
drive  lower  capital  expenditures. 

More  value  at  a  price  that's  less  than  you  might  think  —  another  sign  of  an  intelligent  network  and  the  people 
who  make  it  work  (for  you). 


Find  out  how  to  create  more  value  with  invaluable  (but  free)  white  papers 
from  Sprint.  Visit  sprint.com/whitepapers/11  or  call  1-877-519-1709. 
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Solaris  Operating 
Environment 


The  fast  road 
to  deploying  lava" 
and  XML-based 
services  quickly 
and  reliably. 


On  the  road  to  Web  services, 

a  system 
breakdown  is 
an  invitation  for 
the  buzzards. 
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Open  Net  Environment 


Reports  from  the  road:  Virgin  Atlantic  Airways. 

The  Solaris  Operating  Environment  ensures  that  applica¬ 
tions  for  Virgin  Atlantic  Airways  -  from  Web-based  frequent 
flier  information  to  mission-critical  flight  operations  -  are 
easily  manageable  and  readily  available. 

Reports  from  the  road:  Wingcast. 

Thanks  to  Wingcast,  cars  will  soon  be  equipped  with  wire¬ 
less  safety,  communication  and  convenience  services. 
Anticipating  millions  of  wired  vehicles  to  come,  Wingcast 
wisely  chose  the  Solaris  8  Operating  Environment  for  its 
scalability  and  reliability. 

Sun’s  associates  for  the  ride. 

Sun  teams  with  some  of  the  best  systems  integrators  in 
the  business  providing  the  knowledge  and  experience  you 
need  to  help  you  deploy  your  Web  services  on  the  Solaris 
platform  today:  Cap  Gemini  Ernst  &  Young,  Deloitte  Consulting, 
EDS,  KPMG  Consulting,  Inc.  and  PricewaterhouseCoopers. 


Keep  your  services  engine  running 
Operating  Environment. 

Once  you  get  your  Web  services  built,  you're 
ready  for  the  big  road  test:  deployment.  It 
doesn’t  matter  how  bulletproof  your  Web 
services  are  if  they  don’t  work  all  the  time 
and  they’re  not  secure.  The  Solaris"OE  is 
a  secure,  reliable  way  to  protect  your  Web 


on  all  cylinders  with  the  Solaris" 

services  investment  and  your  hard-earned 
reputation  for  dependable  service.  Solaris, 
supporting  many  of  the  largest  Internet  busi¬ 
nesses,  is  the  foundation  of  Sun™  ONE  and 
provides  a  rock-solid  application  platform  for 
any  kind  of  Web  service. 


Act  now  to  get  your 
free  copy  of  Solaris  9  OE  on  DVD. 
www.sun.com/solarisdvd 
Offer  valid  while  supplies  last. 


tos  International.  Inc.  (CA». 
os.  service  marks  and  logos 
>  their  respactivo  companies. 


It's  true.  We're  devoted  to  three 


things:  you,  you,  and  you.  From  our 


dedicated  600-member  Customer 


Relations  Organization  to  our  flex¬ 


ible  licensing  agreements,  we're 


doing  business  on  your  terms.  Not 


ours.  It's  another  way  that  the  com¬ 


pany  you've  always  counted  on  for 


innovative  software  is  providing 


innovative  business  solutions. 


To  find  out  more,  or  to  hear  what 


some  of  our  customers  have  to  say. 


go  to  ca.com/innovation. 


Computer  Associates™ 
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SEC  May  Mandate  Next-Day  Trade  Settlements 


T+l  could  create  heavy 
burden  for  companies 

BY  LUCAS  MEARIAN 

NEW  YORK 

Even  as  the  Securities  Industry  Associ¬ 
ation  (SIA)  announced  that  it’s  recon¬ 
sidering  the  business  case  for  moving 
the  de  facto  standard  for  settling  trades 
from  three  days  to  one,  a  Securities  and 
Exchange  Commission  (SEC)  official 
said  the  government  plans  to  propose 
rules  that  could  eventually  require 
next-day  trade  settlements. 

Speaking  last  week  at  the  SIA’s 
STP/T+1  conference  here,  Robert  Col¬ 
by,  the  SEC’s  deputy  director  of  market 
regulation,  said  his  agency  could  an¬ 
nounce  the  proposed  rule  as  early  as 
next  month,  preempting  a  vote  the  SIA 
is  scheduled  to  take  July  18  to  deter¬ 
mine  the  industry’s  direction  regarding 
next-day  trade  settlements,  or  T+l. 

The  securities  industry  has  been 
mobilizing  to  move  to  straight-through 


processing  of  trades,  or 
STP,  which  involves  creat¬ 
ing  more  efficient  business 
rules  and  interconnected 
electronic  networks  that 
would  allow  the  flow  of 
trade  data  from  brokers  and 
dealers  to  the  back-end  sys¬ 
tems  of  banks,  brokerages 
and  clearinghouses. 

The  business  case  for 


AT  A  GLANCE 


On  the 
Table 

The  SIA’s  executive 
board  will  vote  July  18. 
Three  options  are 
under  consideration: 

■  Commit  to  achieving  T+1 
by  June  2005. 


to  T+l  will  be  the  associa¬ 
tion’s  focus  over  the  next 
few  months. 

Many  attending  the  con¬ 
ference  said  an  SEC  rules 
proposal  would  be  benefi¬ 
cial  in  opening  a  dialogue 
between  the  industry  and 
the  government. 

Others  didn’t  see  a  busi¬ 
ness  case  for  mandating 


shortening  the  settlement  .  .  . .  T+l,  saying  they  preferred 


cycles  has  recently  come 
under  fire  because  of  the 


■  Commit  to  straight-through 
processing.  Make  T+1  a  design 
standard. 


to  move  ahead  on  creating 
standards,  network  con- 


burden  it  would  place  on  standard.  nectivity  and  systems  in- 


■  Tackle  aspects  of  T+1  that 
have  immediate  R0I  without 
forcing  next-day  settlement. 


firms  at  a  time  when  other 
projects,  such  as  disaster 
recovery  and  business  con¬ 
tinuity,  have  moved  to  the 
forefront.  Others  argue  that  T+l  creates 
little  return  on  investment.  T+l,  togeth¬ 
er  with  STP,  is  expected  to  cost  the  se¬ 
curities  industry  about  $8  billion  to 
achieve. 

Don  Kittell,  executive  vice  president 
of  the  SIA,  said  consensus-building 
around  the  processes  needed  to  move 


teroperability  for  STP. 

“If  we  don’t  figure  out 
straight-through  process- 
ing,  T+l  will  be  irrelevant,” 
said  Mike  O’Conor,  managing  director 
of  global  equities  at  Merrill  Lynch  & 
Co.  in  New  York.  I 

HELP  WANTED 

T+1  needed  a  regulatory  kick-start,  some  brokers  say. 

OQuickLink:  29691 

www.computerworld.com 


Wireless  Data 
Services  Get 
Flat-Rate  Pricing 

BY  BOB  BREWIN 

Verizon  Wireless  is  applying  the  Inter¬ 
net-access  pricing  model  to  its  mobile, 
high-speed  data  business,  offering  high- 
use  enterprise  customers  what  it  calls 
an  “all  you  can  eat”  monthly  flat-rate 
price  of  $99.99. 

Last  week’s  announcement  followed 
one  made  earlier  this  month  by  Reston, 
Va.-based  Nextel  Communications  Inc., 
which  is  offering  a  flat-rate  service 
priced  at  $54.99  per  month.  However, 
the  service  offered  by  Bedminster,  N.J.- 
based  Verizon  Wireless,  the  country’s 
largest  cellular  carrier,  has  a  through¬ 
put  of  40K  to  60K  bit/sec.,  compared 
with  Nextel’s  25K  to  30K  bit/sec. 

Analysts  predicted  that  other  cellular 
carriers  will  quickly  follow  the  lead  of 
Verizon  and  Nextel. 

Phil  Redman,  an  analyst  at  Gartner 
Inc.  in  Stamford,  Conn.,  said  he  views 
the  Verizon  flat-rate  deal  as  a  good  one 
for  users,  noting  that  he  can  easily  con¬ 


sume  12MB  of  data  in  an  hour.  “I  would 
say  [Verizon  is]  heading  in  the  right  di¬ 
rection  and  has  set  the  bar  for  pricing 
on  wireless  data  packet  services,”  he 
said. 

Gary  Robertson,  chief  technology  of¬ 
ficer  at  Delphi  Corp.  in  Troy,  Mich.,  also 
welcomed  the  news.  “Per-megabyte 
[pricing]  does  not  make  sense  in  a  Pow¬ 
erPoint  culture.  My  e-mail  runs  20MB  a 
day,”  Robertson  said. 

Still,  Robertson  said  he  doesn’t  plan 
to  sign  up  Delphi  for  any  kind  of  mobile 
data  service  until  the  carriers  improve 
their  reliability  and  coverage. 

Verizon  plans  to  introduce  flat-rate 
pricing  June  4  on  its  IX  Express  Net¬ 
work. 

Verizon  hasn’t  yet  rolled  out  its  IX 
Express  Network  nationwide.  Kansas 
City,  Mo.-based  Sprint  PCS  Group 


maintains  that  offering  nationwide  cov¬ 
erage  is  the  best  approach,  but  it  won’t 
discuss  its  service  or  pricing  plans  until 
it  turns  on  its  entire  national  third-gen¬ 
eration  service  this  summer,  according 
to  spokesman  Dan  Wilinsky.  “We  be¬ 
lieve  the  race  is  to  the  finish  line,  not 
the  starting  line,”  he  said. 

Ritch  Blasi,  a  spokesman  for  AT&T 
Wireless  Services  Inc.  in  Redmond, 
Wash.,  was  unable  to  say  whether  his 
company  —  which  pioneered  flat-rate 
pricing  for  cellular  voice  service  — 
plans  to  match  Verizon’s  flat-rate  data 
pricing.  But  “we’re  looking  at  our  busi¬ 
ness  pricing  as  we  speak,”  he  said. 
“Pricing  will  be  adjusted  as  we  find  the 
need  to  do  it.”  D 


Reporter  Matt  Hamblen  contributed  to 
this  story. 


Wireless  Data  Services  Cost  Comp; 

■"  '  ‘ 

Verizon  Wireless 

$99.99 

40K-60K  bit/sec.  average; 

Unlimited  usage 

144K  bit/sec.  peak 

Nextel  Communications 

$54.99 

25K-30K  bit/sec.  average; 

Unlimited  usage 

75K  bit/sec.  peak 

AT&T  Wireless 

$39.99  for  10MB 

20K-40K  bit/sec.  average; 

$199.99  for  200MB 

115K  bit/sec.  peak 
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SAP  Makes  Sales 
Management  Changes 

SAP  AG  gave  Leo  Apotheker,  who 
had  served  as  the  software  vendor’s 
European  sales  chief,  responsibil¬ 
ity  for  global  field  operations  and 
named  him  acting  head  of  its  North 
American  unit.  SAP  said  it  expects 
later  this  year  to  name  a  new  CEO 
at  SAP  America  Inc.,  which  was  hit 
by  a  28%  drop  in  software  license 
revenue  during  the  first  quarter. 

Peregrine  to  Restate 
Financial  Results 

Peregrine  Systems  Inc.  in  San  Diego 
said  it  will  restate  the  financial  re¬ 
sults  for  the  first  three  quarters  of 
fiscal  2002,  which  ended  March  31, 
and  for  the  previous  two  years  to 
correct  up  to  SIOO  million  in  rev¬ 
enue-recognition  errors.  The  asset 
management  software  vendor  also 
disclosed  that  the  Securities  and 
Exchange  Commission  is  investigat¬ 
ing  its  accounting  practices. 

USi  Out  of  Chapter  11, 
Sip  Merger  Deal 

Application  service  provider  USin- 
ternetworking  Inc.  (USi)  emerged 
from  Chapter  11  bankruptcy  protec¬ 
tion  with  $81  million  in  new  funding 
from  Bain  Capital  Inc.,  a  Boston- 
based  investment  firm.  Annapolis, 
Md.-based  USi  also  said  it’s  merg¬ 
ing  operations  with  Interpath  Com¬ 
munications  Inc.  Bain  owns  a  con¬ 
trolling  interest  in  Research  Triangle 
Park,  N.C.-based  Interpath. 

J.D.  Edwards  Shows 
Second-Quarter  Profit 

Denver-based  J.D.  Edwards  &  Co. 
reported  a  net  profit  of  $3.5  million 
on  revenue  of  $223.6  million  for 
its  second  quarter  ended  April  30, 
compared  with  a  year-earlier  loss 
of  $7.5  million  on  revenue  of  $221.9 
million.  But  new  sales  of  the  com¬ 
pany’s  business  applications  de¬ 
creased  by  13%  year  over  year. 


NEWSINDUSTRY 


Novell  Seeks  E-Mail 
Jolt  From  Thin  Client 


Upgrade  of  server-based  software  adds 
support  for  Windows  NT/2000  systems 


BY  JENNIFER  DlSABATINO 

ighting  the  per¬ 
ception  that  it’s  an 
also-ran  in  the  corpo¬ 
rate  messaging  mar¬ 
ket,  Novell  Inc.  is  try¬ 
ing  to  grow  its  user  base  with 
upgraded  thin-client  e-mail 
software  that  is  scheduled  to 
ship  next  month. 

Novell  is  positioning  the 
new  release  as  a  lightweight 
but  secure  messaging  tool  for 
workers  who  don’t  sit  at  a  desk 
all  day,  such  as  doctors,  nurses, 
airline  pilots  and  college  stu¬ 
dents  and  professors. 

The  strategy  “does  make 
sense.  That’s  really  where 
you’re  going  to  see  the  expan¬ 
sion  of  messaging,”  said  Michael 
Osterman,  an  analyst  at  Oster- 
man  Research  Inc.  in  Black  Di¬ 
amond,  Wash. 

The  upgraded  Novell  Net- 
Mail  3.1  software,  which  was 


called  Novell  Internet  Mes¬ 
saging  System  in  previous  re¬ 
leases,  was  announced  earlier 
this  month  at  the  company’s 
BrainShare  Europe  user  con¬ 
ference.  Novell  is  adding  sup¬ 
port  for  Windows  NT  and 
Windows  2000  servers  as  part 
of  the  new  release. 

IBM’s  Lotus  Software  Group 
subsidiary  and  Microsoft  Corp. 
are  the  acknowledged  heavy¬ 
weights  of  messaging.  But 
Osterman  said  that  neither 
company  offers  a  behind-the- 
firewall  thin-client  tool  like 
NetMail,  though  both  support 
Web-based  e-mail. 

Product  Advantages 

Users  of  earlier  NetMail  re¬ 
leases  said  it’s  less  expensive 
and  easier  to  administer  than 
enterprise-level  products  such 
as  Microsoft  Exchange,  Lotus 
Notes  and  Domino,  and  Nov- 


AT  A  GLANCE 


NetMail  3.1 

WHAT  IT  IS:  Server-based  thin-client 
software  that’s  compatible  with  POP,  IMAP 
and  Web-based  messaging  clients,  includ¬ 
ing  Microsoft  Outlook  and  Eudora. 

WHAT’S  NEW:  NetMail  3.1  adds  support 
for  Windows  NT  and  Windows  2000 
servers  and  for  synchronizing  data  with 
personal  digital  assistants. 

PRICING  AND  AVAILABILITY:  The 

upgrade  is  scheduled  for  release  through 
Novell’s  resellers  on  June  28  at  a  suggest¬ 
ed  price  of  $15  per  end  user. 


ell’s  own  GroupWise  software. 
NetMail  offers  the  messaging 
basics,  they  said,  including  serv¬ 
er  software  that  manages  a  mail¬ 
box  from  which  users  can  send 
and  receive  messages,  plus  a 
calendar  and  an  address  book. 

“GroupWise  is  a  very  thick 
client.  It  really  didn’t  give  us 
the  opportunity  of  breaking 
out  what  we  wanted  to  give 
students,”  said  Sam  White, 
manager  of  NetWare  and  Win¬ 
dows  NT  support  at  Georgia 


Juniper  Targets  Cisco  With  Unisphere  Deal 


Buys  Siemens  unit 
to  boost  router  line 

BY  STEPHEN  LAWSON 
AND  JOHN  BLAU 

Juniper  Networks  Inc.,  one  of 
the  top  rivals  of  Cisco  Systems 
Inc.  in  the  router  market,  last 
week  moved  to  bolster  its  busi¬ 
ness  by  agreeing  to  buy  a  U.S.- 
based  division  of  Siemens  AG 
that  makes  routers  for  use  at 
the  edges  of  IP  networks. 

The  planned  purchase  of  the 
Unisphere  Networks  Inc.  unit 
would  also  give  Sunnyvale, 
Calif. -based  Juniper  access  to 
Siemens’  worldwide  sales  chan¬ 
nels  through  a  reseller  agree¬ 
ment  announced  as  part  of  the 
deal.  The  companies  said  Ju¬ 


niper  will  pay  Munich,  Ger¬ 
many-based  Siemens  $375  mil¬ 
lion  in  cash  plus  about  10%  of 
its  stock  for  Westford,  Mass.- 
based  Unisphere. 

Together,  Juniper  and  Uni¬ 
sphere  controlled  18%  of  the 
edge  router  market  in  the  first 
quarter,  second  only  to  Cisco’s 
59%  share,  said  Kevin  Mitchell, 
an  analyst  at  Infonetics  Re¬ 
search  Inc.  in  Woburn,  Mass. 

Juniper  began  as  a  maker  of 
core  network  routers  but  has 
expanded  into  equipment  for 
the  edges  of  networks.  “But 
there  was  some  question 
whether  their  edge  routers  are 
optimized  to  deal  with  edge¬ 
routing  needs,”  Mitchell  said. 

Adding  Unisphere’s  product 
line  would  give  Juniper  access 


to  edge-routing  features  such 
as  sophisticated  service  man¬ 
agement  software  and  Multi¬ 
protocol  Label  Switching  tech¬ 
nology  that  can  reroute  data 
around  failed  network  nodes. 


Router  Agreement 


THE  ACQUISITION  is  expected 
to  be  completed  in  the  third  quar¬ 
ter  and  be  “slightly  dilutive"  to 
Juniper’s  earnings  this  year. 

THE  COMPANIES  said  more 
than  60%  of  Juniper's  sales  are 
in  the  U.S.,  while  70%  of  Uni¬ 
sphere’s  business  is  overseas. 

THE  DEAL  came  three  weeks  af¬ 
ter  Unisphere’s  voice  networking 
technology  was  folded  into  Sie¬ 
mens’  other  operations. 


n 


State  University  in  Atlanta. 
The  school  has  60,000  NetMail 
end-user  accounts  on  one  Nov¬ 
ell  NetWare  server  and  4,500 
GroupWise  accounts  on  14  sys¬ 
tems,  White  said. 

Dallas-based  Southwest  Air¬ 
lines  Co.  bought  30,000  Net- 
Mail  licenses  last  year  and  has 
rolled  out  accounts  to  11,000 
pilots  and  flight  crew  members 
so  far.  Employees  can  access 
their  accounts  from  PCs  at 
“crew  bases”  at  hub  airports,  as 
well  as  from  their  homes. 

Eric  Jorgensen,  manager  of 
Intel  operating  system  services 
at  Southwest,  said  about  8,000  of 
the  airline’s  corporate  employ¬ 
ees  were  already  using  Group- 
Wise.  But  NetMail  was  a  better 
option  for  pilots  and  other 
workers  who  don’t  spend  most 
of  their  time  in  offices,  he  said. 

Another  potential  selling 
point  for  Novell  is  its  products’ 
ability  to  manage  user  identi¬ 
ties  from  a  central  directory. 

Jorgensen  said  the  use  of 
Novell’s  eDirectory  software 
to  link  employee  identities  in 
Southwest’s  messaging  system 
with  the  ones  in  its  human  re¬ 
sources  database  was  another 
key  factor  in  the  decision  to  go 
with  NetMail.  Changes  made  in 
the  human  resources  system 
automatically  trigger  actions  in 
the  e-mail  account,  he  noted.  I 


Scott  Kriens,  Juniper’s  chair¬ 
man,  president  and  CEO,  said 
during  a  conference  call  that 
the  deal  isn’t  meant  to  be  a 
cost-cutting  move.  For  exam¬ 
ple,  he  said,  Juniper  plans  to 
continue  developing  its  own 
Junos  routing  software  along 
with  Unisphere’s  technology 
while  providing  a  unified  way 
to  manage  the  products. 

Unisphere  was  formed  in 
1999  when  Siemens  combined 
one  of  its  units  with  three  U.S. 
start-ups  it  had  acquired.  Sie¬ 
mens  had  hoped  to  win  market 
share  from  Cisco,  but  Thomas 
Ganswindt,  president  of  Sie¬ 
mens’  networking  group,  con¬ 
ceded  last  week  that  the  com¬ 
pany  couldn’t  “do  it  all  alone” 
because  of  the  high  cost  of  de¬ 
veloping  router  technology.  I 


Lawson  and  Blau  are  reporters 
for  the  IDG  News  Service. 


NEWSOPMION 
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PATRICIA  KEEFE 


Counting  Is  King 


MY  high  school  journalism  teach¬ 
er  surprised  us  one  day  with  a  visit 
from  the  head  of  Boston’s  Associat¬ 
ed  Press  bureau.  The  lesson  we 
learned  that  day  should  be  taught 
to  every  CIO  on  the  planet. 


PIMM  FOX 


Warehouses 
Need  Unique 


We  leaned  forward  ex¬ 
citedly  in  our  chairs,  fully 
expecting  an  inside  look 
at  murders,  drug  busts 
and  political  scandals. 

But  instead  of  regaling  us 
with  war  stories,  he  lec¬ 
tured  a  startled  audience 
on  Finance  101. 

Further  deflating  our 
afternoon,  he  said  that  if 
we  wanted  to  be  success¬ 
ful  journalists,  we  should¬ 
n’t  major  in  journalism! 

Or  political  science  or,  say,  govern¬ 
ment  studies.  Nope.  Never  mind  all 
that.  Major  in  (gasp)  accounting. 

The  entire  room  reared  back  in 
dismay.  We  thought  he  was  nuts  un¬ 
til  he  explained  himself:  Everything 
comes  down  to  following  the  money. 

Campaign  finance  scandals,  state 
contract  kickbacks,  payoffs,  bribes, 
embezzlement,  budget  allocation 
battles  —  the  money  trail  was  the 
foundation  of  most  investigative 
journalism  and  many  a  Page  One  sto¬ 
ry.  Suddenly,  it  all  became  clear.  (Not 
necessarily  any  less  depressing;  I 
mean,  major  in  accounting?  No  way.) 
But  we  got  the  message.  And  you 
need  to  get  it,  too. 

Counting  is  about  to  become  king 
for  a  budget-strapped,  tightly  staffed 
and  vendor-besieged  IT  community. 
The  flash  and  excitement  of  leading- 
edge  technology  have  been  usurped 
by  rock-bottom  practicality.  Making 
do  with  what  you’ve  got,  and  making 
what  you’ve  got  pay  its  dues,  is  to¬ 
day’s  mantra. 

You  are  also  charged  with  critical 
business  tasks  like  building  the  de¬ 
partment  budget  and  working  out 
contracts  for  licenses,  outsourcing, 
consultants  and  support.  And  you 


are  expected  to  forecast 
three-  and  five-year 
strategic  technology 
plans  that  are  aligned 
with  business  goals.  You 
may  not  be  in  any  posi¬ 
tion  now  to  take  on  new 
projects,  but  you  need  to 
be  prepared  to  move 
once  the  economy  —  and 
corporate  budgets  — 
loosen  up. 

You  also  need  to  keep 
an  eye  on  profitability.  A 
Deloitte  &  Touche  survey  of  CEOs  at 
what  it  considers  the  500  fastest- 
growing  high-tech  companies  in  the 
world  found  that  34%  consider  prof¬ 
itability  their  top  challenge.  Talk  to 
your  CEO;  I  bet  it’s  become  his  top 
issue  as  well. 

Obviously,  you  can’t  possibly  ad¬ 
dress  those  problems  accurately, 
build  a  sustainable  budget  or  negoti¬ 
ate  successfully  with  your  vendors 


and  service  providers  if  you  can’t 
count  up  what  you’ve  already  got, 
calculate  the  extent  to  which  you  are 
using  that  capacity  and  figure  out 
from  there  what  you’ll  need  down 
the  road. 

To  do  that,  you’ve  got  to  get  orga¬ 
nized.  You  have  to  systematically 
crawl  through  every  office,  outpost 
and  mobile  setup  in  the  company 
and  count  up  every  piece  of  equip¬ 
ment,  every  seat  and  type  of  soft¬ 
ware,  every  license,  contract  and 
consultant.  Then,  just  as  systemati¬ 
cally,  you  have  to  calculate  the  value, 
number  of  cycles,  number  of  seats, 
the  number  of  users  and  so  on  of 
your  IT  domain. 

You  need  to  look  for  redundancy, 
unused  capacity  and  unaccounted- 
for  equipment  (you  know  it’s  out 
there).  Then  move  on  to  figuring  out 
the  total  cost  of  ownership  of  your 
equipment,  the  ROI  on  your  proj¬ 
ects,  the  bottom-line  costs  of  your  li¬ 
censes  and  support  contracts.  Once 
you  know  what  you  have,  you  can 
figure  out  what  you’ll  need. 

Unless  you  do  this  legwork,  your 
planning  will  be  off  and  your  budget 
misaligned.  And  there  goes  the  abili¬ 
ty  of  IT  to  contribute  to  today’s  prof¬ 
itability  goals  and  enable  the  success 
of  your  business.  I 


Your  bumpy  path  to¬ 
ward  getting  a  clear, 
single  view  of  the  cus¬ 
tomer  by  using  a  data  ware¬ 
house  can  be  smoothed  with 

the  right  kind  of  database. 

Part  of  the  complexity  begins  with 
efforts  to  coalesce  disparate  data  that 
resides  in  databases  linked  to  already 
functioning  applications.  In  addition, 
much  of  the  valuable  data  inside  an  en¬ 
terprise  is  un¬ 
structured  and 
not  well  condi¬ 
tioned  for  tradi¬ 
tional  relational 
databases. 

Vendors  also 
underestimate 
the  challenge  of 
supporting  a 
data  warehouse 
as  compared 
with  more  typi¬ 
cal  transactional 
processing. 

NCR  Teradata  focuses  its  database 
resources  specifically  for  data  ware¬ 
house  workloads. 

Teradata’s  database  uses  a  hash- 
based  file  system  in  contrast  to  the  in¬ 
dex-based  system  favored  by  compa¬ 
nies  such  as  IBM  and  Oracle  and  used 
mainly  for  finding  rows  in  a  transac¬ 
tion  process. 

An  index-based  system  works  well 
for  write-oriented  tasks  requiring  low 
latency  for  juggling  lots  of  transactions 
concurrently;  Teradata’s  product  isn’t 
designed  for  these  kinds  of  tasks. 

For  read-oriented  analytical  opera¬ 
tions  requiring  a  multitude  of  data 
connections,  Teradata’s  database  is 
eye-catching.  Wal-Mart,  Bank  of  Amer¬ 
ica,  3M  and  British  Airways  have  been 
enticed  into  using  Teradata’s  technolo¬ 
gy  to  consolidate  data  marts  into  a  data 
warehouse. 

As  for  competitors,  says  Kevin 
Strange,  an  analyst  at  Gartner,  there’s 
“little  evidence”  Oracle  is  improving 
its  ability  to  handle  complex  applica¬ 
tion-neutral  data  model  implementa- 

For  more  columnists  and  links  to  archives  of  previous 
columns,  go  to 

0  computerworld.com/columns 
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tions  that  are  at  the  heart  of  data  ware¬ 
house  activities. 

Strange  says  there’s  some  confusion 
over  IBM’s  approach:  Should  compa¬ 
nies  choose  the  extended  DB2  product 
or  Red  Brick  and  the  Informix  Extend¬ 
ed  Parallel  Server  (XPS)?  “IBM  sales 
teams  have  been  proposing  Informix 
XPS  and  Red  Brick  in  some  new  cus¬ 
tomer  implementations,  even  with 
IBM  management  stating  these  prod¬ 
ucts  would  not  be  proposed  for  new 
implementations,”  says  Strange. 

Microsoft’s  SQL  Server  has  received 
low-end  acceptance  for  simple  data 
marts  but  lags  when  faced  with  large 
data  volumes  and  complex  data  models. 

Sybase’s  IQ^and  Adaptive  Server  En¬ 
terprise  products  are  candidates  for 
database  marketing  where  the  organiz¬ 
ing  of  customer  lists  is  based  on  only  a 
few  criteria. 

But  a  data  warehouse  is  something 
else.  It  must  be  powerful  and  versatile 
enough  to  give  non-IT  workers  the 
chance  to  analyze  data  without  IT  con¬ 
straints.  There’s  little  value  in  analyz¬ 
ing  data  that  has  in  essence  been  pre¬ 
digested  because  the  database  can’t 
handle  complex  queries. 

But  remember,  if  you  can’t  apply 
parallel-processing  techniques  to  your 
workload,  hardware  boosts  will  be  a 
waste  of  money.  And  that  would  make 
your  road  to  a  single  customer  view  a 
bumpy  one,  indeed.  ► 

MICHAEL  GARTENBERG 

Being  Careful 
With  IM  Use 

INSTANT  MESSAGING, 
once  the  turf  of  teenagers 
chatting  with  peers  and 
family  members  keeping  in 

touch  long  distance,  is  an  in¬ 

creasingly  valuable  business  tool. 

And  companies  are  exploiting  IM  ef¬ 
fectively.  Managers  can  touch  base  with 
peers  and  direct  reports  in  real  time, 
telecommuters  can  feel  more  connect¬ 
ed  to  events  at  the  office,  and  questions 
needing  immediate  responses  are  no 
longer  held  up  by  delays.  The  more 
e-mail  clutter  users  face  —  and  the 
more  crucial  messages  they  miss  while 
scanning  hundreds  of  spam  messages 
—  the  more  IM’s  popularity  will  grow. 

Yet,  unlike  many  other  mission-criti¬ 
cal  systems,  IM  is  being  deployed 
throughout  many  businesses  without  a 
thought  about  administering  it.  In  fact, 


NEWSOPINION 


much  of  IM’s  business 
growth  is  the  result  of  the 
formation  of  ad  hoc  “buddy 
lists,”  often  at  the  behest  of  a 
manager  who  chooses  the  IM 
tool,  such  as  AOL’s  AIM,  Mi¬ 
crosoft’s  MSN  Messenger  or 
Yahoo  Messenger.  But  while 
IM  may  increase  productivi¬ 
ty,  many  users  are  often  too 
connected,  since  IM  creates 
pressure  to  work  longer. 

But  there’s  an  even  darker 
side  to  IM  that  may  be  ex¬ 
posing  businesses  and  IT 
managers  to  risk.  Consumer- 
based  services  such  as  AIM 
and  MSN  Messenger  are  just 
not  up  to  the  demands  of  the  enterprise 
environment.  If  your  employees  are  de¬ 
ploying  ad  hoc  IM  networks  with  some 
of  these  free  commercial  services, 
here’s  what  you  must  be  careful  about: 

■  First,  because  IM  is  instant  and  im¬ 
mediate,  there’s  a  sense  of  imagined 
privacy,  almost  the  fleeting  atmosphere 
of  a  conversation.  A  number  of  stories 
are  circulating  about  managers  who 
thought  their  IM  conversations  were 


no  more  permanent  than  a 
gossip  session  at  a  water 
cooler,  only  to  have  to  face 
their  words  later  and  deal 
with  the  ramifications,  in¬ 
cluding  embarrassment  or, 
in  extreme  cases,  their  fir¬ 
ings.  (It’s  easy  to  preserve  a 
transcript  of  an  IM  ses¬ 
sion.)  Consumer-grade  IM 
services  also  aren’t  secure. 
If  you’re  worried  about  se¬ 
curity  (and  you  should  be), 
you  must  consider  using  an 
IM  server  that  will  work 
only  in-house.  Try  this  rule: 
If  you  wouldn’t  want  to  see 
it  posted  online,  don’t  say  it 
in  an  IM  message. 

■  Second,  many  businesses  have 
strict  regulations  about  keeping  corre¬ 
spondence  logs.  (You  financial  services 
folks  paying  attention?)  Since  instant 
messages  aren’t  typically  stored  on 
servers,  there’s  no  record.  Compliance 
officers  in  regulated  firms  must  ensure 
that  IM  can’t  be  classified  as  a  method 
of  communication  that  must  be  logged, 
or  they  must  ensure  that  logging  mech¬ 


anisms  are  in  place.  Another  rule:  Make 
sure  you  can  keep  only  what’s  needed 
and  discard  the  rest. 

■  Finally,  there  are  privacy  and  pro¬ 
ductivity  issues.  The  courts  have  long 
held  that  businesses  have  the  right  to 
monitor  and  read  employee  e-mail. 
That  would  also  likely  apply  to  IM.  It’s 
important  to  set  clear  policies  on  us¬ 
age,  such  as  who  may  be  allowed  on  a 
buddy  list.  End  users  should  also  be  re¬ 
minded  that  someone  might  be  eaves¬ 
dropping  on  IM  conversations.  Rule: 
Treat  IM  the  way  you  did  when  e-mail 
first  arrived.  Set  clear  usage  policies 
and  make  sure  everyone  understands 
the  rules  before  playing. 

Instant  messaging  can  be  a  valuable 
tool  for  communicating  effectively  and 
immediately.  But  in  the  wrong  hands,  it 
can  lower  productivity,  potentially  hu¬ 
miliate  your  company  and  compromise 
corporate  networks.  I 


ENTERPRISE  IM  LAGS  EXPECTATIONS 

A  March  survey  shows  30%  of  companies  officially  using 
IM,  far  below  an  IDC  projection  made  18  months  earlier. 
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XP  Saga  Strikes  Chords 

MY  xp  upgrade  was 
very  similar  to 
Robert  L.  Mitch¬ 
ell’s,  as  described  in  “Tales 
of  the  UneXPected”  [Quick- 
Link:  28875],  although  I 
bought  my  Dell  Dimension 
4100  last  June,  so  most  of  the 
software  is  newer  and  didn’t 
need  replacing. 

The  real  hassle  was  hunt¬ 
ing  down  all  the  newest  dri¬ 
vers.  The  Dell  Web  page 
warns  that  downloading 
from  anywhere  else  means 
Dell  doesn’t  need  to  help  me 
anymore.  Yet  when  I  called 
Dell  tech  support  to  com¬ 
plain  about  the  site’s  incom¬ 
plete  set  of  drivers,  they  told 
me  to  go  to  the  various  man¬ 
ufacturer  sites  and  look  for 
myself.  So  much  for  sticking 
with  a  single  vendor  to  en¬ 
sure  coherent  support. 

Mark  Cybulski 
Rochester,  Mich. 

This  was  a  classic  case 
of  how  not  to  upgrade 
other  users’  PCs. 


Mitchell  should  have  in¬ 
stalled  XP  and  tested  his  ap¬ 
plications  on  a  separate  PC 
so  as  to  not  subject  his 
clients  (in  this  case,  his  fam¬ 
ily)  to  the  hardships  of  the 
issues  he  encountered.  The 
cost  of  the  exercise  didn’t 
justify  the  benefits,  as  the 
users  were  working  fine  in 
the  existing  environment 
and  the  upgrade  brought 
them  no  obvious  benefits. 
Ryan  L.  Bouffard 
Programmer/analyst 
Kwantlen  University  College 
Surrey,  British  Columbia 


It's  an  Employer's  Market 

I  HAVE  SOME  observations 
regarding  the  “skills  im¬ 
balance”  discussed  in  Pa¬ 
tricia  Keefe’s  May  13  editori¬ 
al  [QuickLink:  29632].  Since 
Sept.  11,  the  market  has  been 
flooded  with  programmers 
competing  for  the  same  jobs 
as  me.  This  flood  of  unem¬ 
ployed  programmers  has  al¬ 
lowed  employers  to  become 
superpicky,  asking  for  a  spe¬ 
cific  skill  set  and  a  certain 


number  of  years  in  a  specif¬ 
ic  industry.  What’s  more,  a 
single  job  might  have  three 
or  more  postings  on  a  job 
site  from  different  recruit¬ 
ers,  creating  the  illusion  that 
there  are  more  jobs  out 
there  than  there  are.  Anoth¬ 
er  reason  that  it’s  difficult 
for  IT  workers  to  get  jobs  is 
that  recruiters  are  ignorant 
of  the  ability  to  transfer 
skills  from  one  technology 
to  another. 

Lawrence  Willey 
Senior  software  developer 
Jacksonville  Sheriffs  Office 
Jacksonville,  Fla. 
lwilley@hotmail.com 


Software  Buyer  Beware 

AS  AN  ex-Oracle  staff 
consultant  with  30 
years’  experience  in 
large  IT  projects,  I  would 
have  to  place  the  blame  for 
the  situation  described  in 
the  story  “California 
Firestorm  Threatens  Oracle 
Deal”  [QuickLink:  29683] 
primarily  on  the  civil  ser¬ 
vants  who,  in  my  opinion, 


didn’t  do  their  homework 
and  probably  weren’t  quali¬ 
fied  to  do  the  needed  home¬ 
work.  Oracle,  like  any  soft¬ 
ware  vendor,  will  sell  as 
much  as  the  customer  is 
willing  to  buy.  It’s  the  re¬ 
sponsibility  of  the  buyer  to 
“buy  right,”  including  nego¬ 
tiating  a  tight,  cost-effective 
contract  that  includes  all 
costs,  such  as  systems  inte¬ 
gration,  testing,  training  and 
deployment. 

Ed  Gardner 

Web  technologies  and  services 

director 

San  Jose 
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THIS  WEEK 


SCHOOL  DAZE 

Computer  science  undergrads  who 
are  about  to  enter  the  workforce 
are  getting  a  harsh  lesson  in  market 
dynamics  as  they  find  themselves 
competing  fiercely  with  veteran  IT 
professionals  for  coveted  positions. 
PAGE  26 


ETIQUETTE  FOR 
ENG  NEERS 

Universities  such  as  MIT  are  offer¬ 
ing  charm  school  programs  to  help 
teach  students  who  are  about  to 
enter  the  workplace  learn  some 
useful  social  graces.  PAGE  30 


RETURN  ON  RENTALS 

A  growing  number  of  companies 
are  shifting  to  leasing  mainframes 
and  servers  instead  of  buying  them 
outright  so  they  can  upgrade  more 
frequently  and  reduce  upfront 
capital  spending.  PAGE  42 


TITLE  TURNABOUT 

A-dec  Inc.,  a  maker  of  dental  office 
furniture  and  equipment,  has 
turned  IT  management  on  its  ear 
by  having  its  chief  financial  officer 
report  to  its  newly  minted  chief  of 
information.  PAGE  43 


CATHY  HOTKA/PEER  TO  PEERS 

Informal  Education 


SO  SENIOR  AND  SO  EXPERIENCED.  Yet  SO  Stale. 

Are  you  well  versed  only  in  technologies  that  are  at  least  10 
years  old?  Do  you  spend  all  your  time  on  ROI,  depreciation  and 
staff  issues,  only  to  find  that  your  tech  skills  are  toast? 

It’s  tough  for  senior  managers  to  stay  current  on  technology, 


which  will  always  be  a  moving  target. 

Could  you  accurately  describe  Wi-Fi, 

SOAP,  P3P  or  LDAP  to  a  member  of  your 
tech  team?  The  task  can  be  overwhelming. 

For  instance,  a  CIO  pulled  me  out  of  a 
meeting  two  years  ago  and  urgently  whis¬ 
pered,  “What  in  the  world  is  XML?” 

To  stay  on  top,  senior  IT  people  must 
use  a  variety  of  tools  and  practices  to  make 
sense  of  the  ever-changing  technology 
landscape  and  evolving  management 
philosophies  and  business  practices.  There 
might  not  be  time  for  formal  classes,  but 
the  CIOs  I’ve  talked  with  prefer  the  follow¬ 
ing  inexpensive  yet  effective  methods  of 
updating  their  knowledge: 

■  See  what  your  peers  say.  There’s  no  sub¬ 
stitute  for  talking  with  colleagues  regularly.  Try  to  do 
this  in  person.  Off-line  communication  is  helpful,  but 
it’s  no  substitute  for  in-person  advice  from  trusted 
friends.  Ask  about  business  DSL  installations  and 
watch  your  colleagues  roll  their  eyes  because  they 
can’t  get  carriers  to  respond  to  service  orders;  ask 
about  VPNs  and  see  how  others  are  using  them.  Join 
an  organized  group  of  IT  leaders  either  within  or  out¬ 
side  your  company’s  industry. 

■  Get  out  of  your  office  and  meet  new  people.  When  you 
attend  conferences,  make  the  rounds  at  every  cock¬ 
tail  party  and  networking  opportunity.  You  may  make 
lifetime  friends  and  learn  about  technologies  and 
practices  that  may  not  seem  important  now,  but 
could  be  critical  next  year. 

■  Chat.  Talk  with  others  via  e-mail  or  online  com¬ 
munities.  The  answers  to  your  questions  may  come 
from  someone  in  a  different  industry. 

■  Subscribe  to  online  news  services.  We  all  get  electron¬ 
ic  newsletters  that  clog  our  in-boxes.  But  savvy  IT 
practitioners  define  preferences  and  ask  for  relevant 
content  through  e-mail.  Look  for  such  services  from 
business  publications. 

■  Take  business  unit  managers  out  to  lunch.  For  the  price 
of  a  cheeseburger  and  a  Coke,  you  can  reap  valuable 
intelligence  about  what’s  going  on  in  key  parts  of 
your  company.  Business  unit  managers  will  also  be 
happy  to  spill  the  beans  on  what  technologies  your 


company’s  competitors  are  using. 

■  Use  research  services  you’ve  already  paid  for. 

If  you’ve  coughed  up  thousands  of  dollars 
for  subscriptions  to  research  services, 
don’t  let  those  reports  languish  in  your 
SUV’s  trunk.  Read  them,  right  in  the  office. 

■  Use  vendors  as  advisers.  Technology 
companies’  sales  and  marketing  people 
have  to  really  understand  core  technolo¬ 
gies  before  they  can  sell  them.  Ask  these 
experts  how  the  technologies  work,  who 
else  has  implemented  them  and  what’s 
coming  in  two  or  three  years. 

■  Shop  the  competition.  Some  CEOs  think 
that  the  coolest  technologies  are  those  in 
use  at  other  companies.  Call  up  their  call 
centers,  check  out  their  Web  sites  or  shop 

in  their  stores.  See  for  yourself  what  your  CEO  might 
have  read  about  in  an  airline  magazine. 

■  Get  involved  locally.  Many  cities  have  groups  of  se¬ 
nior  IT  executives  whose  members  share  experi¬ 
ences  and  create  ideas. 

■  Read.  Many  senior  people  read  only  business  pub¬ 
lications.  Borrow  a  direct  report’s  magazine  and  see 
what  you’ve  been  missing. 

■  Create  the  future.  Don’t  like  the  technologies  you 
see?  Define  your  destiny  by  forming  a  new  interest 
group  of  cross-industry  peers  that  can  press  vendors 
with  what  users  really  need. 

Staying  ahead  on  technology  is  a  battle  that’s  never 
won.  It  means  looking  not  to  next  year,  but  three 
years  out.  You’ll  be  able  to  do  that  only  if  you  con¬ 
stantly  ask  questions,  get  out  of  your  office  and  talk 
to  the  change  agents  who  are  making  a  difference.  ► 

EDITOR’S  NOTE 

Beginning  today,  Computerworld’ s  Business  section  will 
publish  Peer  to  Peers,  a  monthly  column  written  by  an  IT 
executive  or  manager.  Peer  to  Peers  will  serve  as  a  forum  for 
IT  leaders  to  offer  advice  or  criticism,  comment  on  industry 
events  or  discussions,  raise  issues  or  rally  support.  We  hope 
you  will  gain  insights,  and  we  welcome  your  feedback.  Please 
send  your  comments  and  questions  to  columns  editor  Rick 
Saia  at  rick_saia@computerworld.com 
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'  VEN  THE  MOST  TECH-SAVVY  STUDENTS 
in  the  class  of  2002  will  need  good  mar¬ 
keting  skills  to  land  a  job  this  year.  In  this 
slow  economy,  employers  are  selectively 
l  choosing  their  campus  recruits  — 
including  entry-level  IT  applicants,  says  Camille 
Luckenbaugh,  employment  information  manager  for 
the  National  Association  of  Colleges  and  Employers 
(NACE)  in  Bethlehem,  Pa. 

“Recruiting  for  IT  positions  has  diminished  com¬ 
pared  to  previous  years,”  says  Lonnie  Dunlap,  direc¬ 
tor  of  university  career 
services  at  Northwestern 
University  in  Evanston,  Ill. 
Indeed,  many  firms  are 
slashing  their  entry-level 
hires  by  20%  this  year  compared  with  2001,  accord¬ 
ing  to  a  NACE  survey  of  230  companies. 

Employers  want  a  range  of  IT  skills,  from  Web 
development  to  software  programming  and  main¬ 
frame  experience.  And  as  students  compete  for  jobs 
with  their  peers  —  as  well  as  downsized  IT  workers 
—  they’ll  also  need  good  networking  skills,  relevant 
internships  and  smart  job-hunting  strategies. 

Although  IT  spending  has  declined  industrywide 
this  year,  companies  still  need  “people  to  manage  the 
systems  and  networks  and  develop  applications  in  a 
company’s  IT  department,”  says  John  Challenger, 
CEO  of  Chicago-based  outplacement  firm  Chal¬ 
lenger,  Gray  &  Christmas  Inc.  Challenger  says  hiring 
managers  are  looking  for  IT  workers  who  can  devel¬ 
op  and  manage  enterprisewide  e-commerce  and  cus¬ 
tomer  relationship  management  (CRM)  applications. 

Helen  Anderson,  a  computer  consultant  at  Ameri¬ 
can  Management  Systems  Inc.  in  Fairfax,  Va.,  who 
graduated  in  2000  from  the  University  of  Virginia  in 
Charlottesville,  agrees  that  experience  working  with 
Java  and  CRM  applications  is  a  big  asset. 

For  its  part,  Northbrook,  Ill.-based  Allstate  Insur¬ 
ance  Co.  needs  software  developers  who  are  profi¬ 
cient  in  C,  C+  and  C++,  as  well  as  Cobol  program¬ 
mers  and  systems  analysts,  says  senior  IT  manager 
Lorraine  Baiun. 

Charlottesville,  Va.-based  SNL  Securities  LLC  will 
hire  four  or  five  entry-level  IT  graduates  who  have  a 
mix  of  Web  development,  Web  design  and  technical 
support  skills,  says  Barbara  Kessler,  human  resources 
director  at  the  financial  publishing  firm.  “Some  ac¬ 
counting  knowledge,  such  as  a  class  or  two,”  is  a  big 
plus  for  someone  who  wants  to  work  at  a  financial 
services  firm,  she  says. 

As  companies  extend  fewer  offers  to  computer  sci¬ 
ence  graduates  this  year,  students  with  relevant  in¬ 
ternship  experience  will  make  a  greater  impression, 


Entry-level  IT  candidates  face  a  tough  market, 
but  there  are  opportunities  out  there  if  you  look  in 

the  right  places.  BY  JULEKHA  DASH 
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say  employers.  A  student  applying  for  a  position  at 
Fairfax,  Va.-based  SRA  International  Inc.  should 
ideally  have  had  an  internship  at  an  IT  consulting 
firm  or  a  government  contractor,  says  Amanda 
Schutz,  college  recruiting  manager  at  SRA.  The  IT 
services  firm  provides  systems  integration  and  con¬ 
sulting  services  primarily  to  government  agencies. 

“If  they  liked  [the  internship],  then  there  is  a  good 
chance  they’ll  like  it  at  SRA,”  she  says. 

Schutz  says  that  SRA  will  hire  10  college  graduates 
this  year,  compared  with  20  last  year.  Most  of  these 
new  recruits  will  be  computer  science,  electrical  en¬ 
gineering  or  information  systems  majors,  says 
Schutz,  v/ho  adds  that  her  Firm  needs  employees 
with  well-rounded  technology  skills,  including 
hands-on  experience  with  several  programming  lan¬ 
guages,  such  as  Java  and  C++. 

“Most  of  our  contracts  are  with  the  government 
and  involve  a  little  bit  of  everything”  in  IT,  she  says, 
adding  that  new  hires  “start  with  one  project  and 
move  around  the  company.” 

At  Oakland,  Calif.-based  Kaiser  Permanente 
Health  Plan  Inc.,  most  of  the  available  entry-level  IT 
positions  are  in  the  help  desk  and  technical  support 
areas,  says  Matt  Capaci,  college  and  diversity  project 
manager  for  the  company’s  IT  division.  Capaci 
couldn’t  say  how  many  graduates  Kaiser  Permanente 
will  add  to  its  4,000-person  IT  staff  this  year. 

Downwardly  Mobile 

Those  students  lucky  enough  to  land  job  offers  are 
seeing  lower  salaries  and  fewer  perks  compared  with 
last  year.  According  to  NACE,  the  average  salary  of¬ 
fer  for  a  computer  science  graduate  has  dropped 
3.6%  this  year  (see  chart  at  right). 

Lockheed  Martin  Corp.  is  “not  losing  as  many  stu¬ 
dents  to  inflated  offers”  from  competitors  this  year, 
says  Teri  Matzkin,  lead  recruiter  for  the  Bethesda, 
Md.-based  aerospace  and  government  contractor. 
While  salaries  remain  “competitive,”  the  company 
doesn’t  need  to  extend  other  perks  —  such  as  signing 
bonuses  —  to  entice  the  engineering  students  it 
wants  to  hire,  she  says. 

The  economic  slowdown  forced  the  company  to 
slash  its  original  college  hiring  projection  in  the 
Washington  metropolitan  area  by  40%,  from  227  stu¬ 
dents  to  142,  Matzkin  says. 

Students  have  been  forced  to  become  less  picky 
about  quality-of-life  issues  such  as  location.  In  the 
past,  enticing  entry-level  IT  graduates  to  move  to 
Charlottesville  was  a  problem  for  SNL,  says  Kessler. 
“For  someone  in  a  bigger  city,  coming  to  Char¬ 
lottesville  is  not  on  their  to-do  list,”  she  says.  And 
many  graduates  from  the  University  of  Virginia 


SLIDING 

SALARIES 

MAJOR:  LOGISTICS/MATERIALS 
MANAGEMENT 


AVERAGE  OFFER:  $39,828 

DROP  FROM  LAST  YEAR:  12.3% 

JOB  OFFERS:  A  decrease  in  the  number  of 
available  consulting  and  systems  engineering 
positions  accounts  for  the  large  salary  drop. 
Those  jobs  average  higher  salaries  than  the 
management-trainee  positions  that  are  being 
offered  this  year. 
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MAJOR;  COMPUTER  SCIENCE 

AVERAGE  OFFER:  $50,352 

_ 

DROP  FROM  LAST  YEAR:  3.6% 

JOB  offers:  Many  offers  have  been  for 
software  design  positions  that  average  $54,922. 
Computer  systems  design  firms,  government 
agencies  and  aerospace  employers  have 
shown  the  most  demand  for  people  to  fill  these 
positions. 

MAJOR:  ELECTRICAL  ENGINEERING 


AVERAGE  OFFER:  $50,387 

DROP  FROM  LAST  YEAR:  3  5% 

job  OFFERS:  Positions  in  design  engineer¬ 
ing,  hardware  design  and  development,  and 
systems  engineering  account  for  many  of 
these  job  offers. 

SOURCE:  NATIONAL  ASSOCIATION  OF  COLLEGES  AND 
EMPLOYERS.  BETHLEHEM,  PA.;  APRIL  2002  SURVEY 
OF  230  COMPANIES. 


shunned  the  idea  of  remaining  in  the  town  of  40,000, 
she  says. 

But  thanks  to  the  soft  labor  market,  SNL  can  now 
draw  from  a  more  talented  pool  of  students,  says 
Kessler,  who  recently  waded  through  more  than  100 
resumes.  “It’s  a  good  problem  to  have,”  she  says. 

College  seniors  and  recent  graduates  recall  the 
not-so-distant  past  when  employers  tried  to  outbid 
one  another  to  lure  IT  students. 


Two  years  ago,  students  “just  had  to  show  up  for 
interviews”  to  find  a  job,  says  Neal  Frager,  an  electri¬ 
cal  and  computer  engineering  major  at  Cornell  Uni¬ 
versity  in  Ithaca,  N.Y. 

Now  computer  science  and  other  technology  ma¬ 
jors  express  fear  and  anxiety  over  their  job  search.  “I 
was  nervous  last  semester  and  relieved  when  I  got 
my  first  offer,”  says  Frager,  who  accepted  a  job  in 
technical  sales  and  marketing  at  Dallas-based  Texas 
Instruments  Inc. 

Not  everyone  has  been  so  lucky.  After  interview¬ 
ing  with  about  a  half-dozen  companies,  Mike  Peo¬ 
ples,  a  senior  majoring  in  computer  science  at  the 
University  of  Pennsylvania,  has  yet  to  find  a  job. 
When  he  follows  up  with  employers  to  find  out  why 
he  wasn’t  hired,  Peoples  says  he  doesn’t  get  “much  of 
an  answer.” 

Marketing  Savvy  Required 

One  reason  students  are  having  a  tougher  time 
finding  work  is  because  their  job  rivals  include  not 
only  other  seniors,  but  also  recent  graduates  who 
were  laid  off  from  their  first  jobs,  says  Challenger. 

Because  they’re  competing  for  fewer  positions, 
students  need  a  bit  of  marketing  savvy  to  find  work. 
Students  who  just  “want  any  job  and  are  not  focused 
on  what  they  want  are  having  more  trouble”  finding 
work,  says  Frager.  Companies  want  to  see  whether 
the  job  candidate  will  be  happy  working  for  the  com¬ 
pany,  since  recruiters  figure  that  “if  you’re  happy, 
then  you’re  more  motivated,”  he  says. 

Talking  about  extracurricular  activities  will  help 
make  an  impression  with  recruiters,  says  Frager. 
“This  allows  the  recruiter  to  remember  you  if  he  has 
seen  a  hundred  people  in  one  day,”  he  says.  For  in¬ 
stance,  Frager  has  listed  rock  climbing  and  tennis 
among  his  interests  on  his  resume. 

Students  should  also  employ  a  variety  of  job 
search  techniques  and  not  limit  themselves  to  just 
one  method,  says  Dunlap.  In  addition  to  interviewing 
with  employers  on  campus,  students  should  join  pro¬ 
fessional  organizations,  such  as  the  Association  for 
Women  in  Computing  in  San  Francisco  or  the  Asso¬ 
ciation  of  Information  Technology  Professionals  in 
Park  Ridge,  Ill.,  and  contact  employers  directly,  ac¬ 
cording  to  Dunlap. 

Challenger  warns  students  not  to  rely  too  much  on 
the  Internet  for  their  job  searches  because  it  limits 
critical  face-to-face  contact.  “Sending  your  resume 
[by  e-mail]  and  searching  the  Web  is  not  the  best 
way”  to  find  a  job  in  a  tough  climate,  he  says. 

Instead,  Challenger  stresses  the  need  to  network 
and  make  use  of  existing  contacts. 

“You  need  to  go  out  and  see  other  graduates  [with 
jobs]  and  professors  and  people  in  business.  See 
everybody  who  graduated  from  your  school  in  the 
last  five  years  in  your  area.  Most  likely,  they  will  be 
open  to  seeing  you,”  he  says.  ► 


Dash  is  a  freelance  writer  in  Lewes,  Del.  Contact  her 
at  mail@julekhadash.com. 
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There  was  a  time  when  women  wore  ties. 
Not  anymore.  That  stays  in  the  ’80s. 

The  style-sawy  instructor  uses  her 
pointer  to  illustrate  various  fashion  faux 
pas.  “Never,  ever  wear  white  socks  with 
black  shoes,”  she  states  emphatically. 

“Apparently,  I  need  a  little  help,”  jokes  Todd  Thomp¬ 
son,  a  third-year  MIT  graduate  chemistry  student, 
gazing  down  at  his  black  shoes  and  white  socks.  “And 
my  belt  doesn’t  exactly  match  my  shoes.” 

Chances  are,  Thompson’s  belt/shoes  combo  won’t 
make  or  break  his  career.  And  many  of  the  courses 
offered  at  MIT’s  annual  Charm  School 
—  created  in  1993  as  a  way  for  the 
school  to  poke  fun  at  its  reputation  as  a 
haven  for  brainy  nerds  —  are  clearly  just 
for  laughs.  But  as  today’s  corporations 
push  for  ever-improving  customer  service  and  ex¬ 
pect  IT  professionals  to  spend  increasing  amounts  of 
time  with  end  users  and  external  customers,  MIT’s 
daylong  program  has  evolved  to  offer  students  some 
practical  lessons  in  social  skills  that  are  likely  to 
come  in  handy  as  they  enter  the  job  market. 

“I  think  they  should  mandate  Charm  School,”  says 
Thompson.  “They  should  add  a  personal  hygiene 
booth.” 

MIT’s  Charm  School  is  one  of  a  growing  number 
of  programs  that,  while  presented  in  a  lighthearted 
fashion,  are  geared  toward  raising  future  IT  workers’ 
awareness  of  the  need  to  hone  their  soft  skills,  such 
as  communicating  with  users  and  working  on  a  team. 
At  several  Philadelphia- area  colleges  and  high 
schools,  for  instance,  workers  from  Lockheed  Martin 
Corp.  teach  business  etiquette  courses  to  students 
[QuickLink:  29941].  And  as  IT  becomes  ever  more 
closely  aligned  with  core  business  strategies,  even 
technology  veterans  are  lining  up  for  social  devel¬ 
opment  courses.  Workers  at  Woburn,  Mass.-based 
Genuity  Inc.  and  Boston-based  Fidelity  Investments, 
for  example,  have  taken  “Teaching  Techies  to  Talk,” 
a  program  offered  by  New  Castle,  N.H.-based  Loyalty 
Factor  LLC. 

“There  really  is  a  need  for  it,”  says  Calvin  Sun, 
principal  of  Paoli,  Pa.-based  consultancy  Calvin  Sun 
&  Associates,  which  has  taught  IT  charm  school 
classes  at  companies  such  as  Philadelphia  Gas  Works, 
Triton  PCS  and  Potomac  Electric  Power  Co.  Just  last 


month,  he  taught  the  classes  at  NStar,  a  Boston-based 
energy  distributor  whose  CIO  has  been  focused  on 
making  the  IT  division  more  customer-centric  since 
he  was  hired  last  fall  after  a  series  of  high-profile  and 
controversial  blackouts  [QuickLink:  27158]. 

“IT  people  have  to  deal  with  nontechnical  people 
all  the  time  . . .  [and]  they  either  use  jargon  and  total¬ 
ly  confuse  the  person,  or  they  talk  down  to  the  per¬ 
son  and  insult  their  intelligence,”  says  Sun.  “They’re 
so  intent  on  solving  the  technical  problem  that  they 
forget  to  acknowledge  that  the  customer  is  frustrated 
by  the  technical  problem.” 

The  Skinny  on  Soft  Skills 

Just  glancing  through  MIT’s  Charm 
School  agenda  —  with  courses  on  topics 
such  as  small  talk  and  attentive  listen¬ 
ing,  table  manners  and  connecting  with  alumni  — 
gives  Gil  Alterovitz,  a  second-year  health  science 
graduate  student,  an  idea  of  some  of  the  things  he 
should  be  paying  attention  to  as  he  gets  ready  for 
the  business  world. 

“As  a  graduate  student,  you  might  be  isolated  in 
a  lab,  so  you  don’t  really  need  [social  graces]  here. 

But  outside,  it’s  important,”  Alterovitz  explains,  after 
asking  the  accessories  instructor,  Sharon  Shamir,  if 
it’s  acceptable  to  wear  a  turtleneck  under  a  sweater. 
“Normally,  it  would  be  embarrassing  to  ask  people, 
but  here,  it’s  OK.” 

While  Alterovitz’s  inquiry  is  geared  more  toward 
pleasing  his  girlfriend  than  a  potential  employer,  he 
says  he’s  picked  up  a  few  valuable  lessons  at  Charm 
School. 

For  instance,  he  learned  from  the  body  language 
session  that  60%  to  80%  of  the  messages  you  send 
are  through  nonverbal  communication.  So  you  might 
say  something,  but  if  you  don’t  look  convinced  that 
what  you’re  saying  is  right,  it  will  be  hard  to  get  your 
point  across  to  co-workers  or  prospective  employers. 

Alterovitz  is  on  the  right  track.  Robert  Bowman, 
information  manager  for  Stamford,  Conn.-based 


Xerox  Corp.’s  developing  markets  and  integrated 
supply  chain  division,  says  communication  skills  are 
something  he  always  looks  for  in  new  hires. 

“Today,  a  lot  of  the  IT  youngsters  come  out  of 
school  with  a  lot  of  good  school  background  but  not 
a  lot  of  business  knowledge,”  he  says.  “Technical 
competence  is  outstanding,  but  if  they  can’t  apply 
it  to  the  business  process,  they’re  really  limited.” 

In  interviews,  Bowman  asks  students  to  tell  him 
about  times  they  worked  with  others  to  develop 
solutions.  They  could  be  classroom  projects  or 
group  papers,  work  experiences  or  volunteer  activ¬ 
ities,  he  says. 

Diplomacy  is  a  soft  skill  that  Sharon  Karackattu, 
a  second-year  MIT  biology  graduate  student,  says  is 
critical  for  the  workplace.  At  Charm  School,  sessions 
such  as  “Working  With  People  You  Really  Need  in 
Life”  or  “How  to  Tell  Somebody  Something  They’d 
Rather  Not  Hear”  offer  students  tips  on  navigating 
their  way  through  some  of  the  touchier  aspects  of 
the  business  world. 

Allison  Hemming,  president  of  New  York-based 
recruiting  firm  The  Hired  Guns,  says  one  of  the  most 
common  turnoffs  for  hiring  managers  and  recruiters 
is  young  IT  workers  who  feel  that  they’re  doing  com¬ 
panies  a  favor  by  interviewing  with  them. 

“Confidence  in  your  abilities  —  you  have  to  have 
that  when  you  go  out  on  an  interview,”  she  says.  “But 
there’s  a  fine  line  between  that  and  entitlement.” 

Hemming  also  suggests  videotaping  mock  inter¬ 
views  with  friends  and  then  watching  them  to  see 
which  areas  could  use  improvement. 

Luc  LaFontan,  vice  president  of  corporate  tech¬ 
nology  at  New  York-based  About  Inc.,  suggests  that 
students  go  to  actual  interviews  for  practice.  “The 
advice  that  I  wish  someone  had  given  me  was  you 
should  go  on  20  interviews  at  places  that  you  don’t 
want  to  work  before  you  go  on  one  where  you  do 
want  to  work,”  says  LaFontan. 

Plenty  of  students  break  basic  social  rules,  such  as 
keeping  cell  phones  on  during  exams  —  and  answer- 


Schools  such  as  MIT  are  teaching  future  IT 
professionals  the  finer  points  of  small  talk  and 
style  savvy.  BY  MELISSA  SOLOMON 
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ing  them,  says  Simon  Lawrence,  an  MIT  senior 
majoring  in  electrical  engineering  and  computer 
science.  One  Charm  School  course,  called  “Exem¬ 
plary  Locomotion,”  is  a  must  at  MIT,  he  says.  It 
teaches  students  how  to  walk,  which  might  seem  like 
a  given,  but  many  students  start  to  hunch  forward 
after  trudging  around  campus  with  multiple  laptops 
in  their  knapsacks,  he  explains. 

Problem  is,  the  students  who  are  most  in  need 
of  charm  school  classes  aren’t  likely  to  sign  up  for 
them,  says  Laura  Noren,  a  senior  comparative  media 
studies  and  architecture  major.  “If  you  still  have  four 
laptops  in  your  bag,  you’re  probably  in  the  lab,” 
Noren  says. 

Many  of  the  students  at  MIT’s  Charm  School  see  it 
as  no  more  than  a  goofy  way  to  spend  a  rainy  Friday 
afternoon.  They  attend  their  courses  with  gusto,  col¬ 


lecting  their  credits  from  instructors  so  they  can 
earn  a  bachelor’s,  master’s  or  doctorate’s  degree  in 
charm,  but  they’re  not  really  expecting 
to  pick  up  too  many  life  lessons. 

“I  don’t  know  how  practical  it  is,”  says  Leah 
Schmelzer,  a  senior  math  major  watching  the  session 
on  how  to  tie  a  bow  tie.  “Some  of  it’s  fun,  and  some 
of  it,  you’re  like,  ‘OK.’  ” 

When  asked  what  made  him  and  his  friends  trek  to 
the  student  union  for  Charm  School,  Chris  Roberts, 
a  first-year  technology  and  policy  graduate  student, 
flashes  his  sawiest  smile.  “We  want  to  become  charm¬ 
ing.  Is  it  working?”  he  asks  with  a  wink. 

Despite  the  stereotype  of  MIT  bookworms, 

Roberts  says  he’s  been  pleasantly  surprised  by  the 
emphasis  on  working  with  and  giving  presentations 
to  other  students. 


“Technical  skills  should  be  a  given,”  Roberts  says. 
“But  you  need  to  be  able  to  communicate  that  to 
work  on  a  team.” 

Kelly  Han,  a  freshman  majoring  in  brain  and  cog¬ 
nitive  science,  had  no  problem  communicating  her 
excitement  as  she  stood  atop  a  bench,  whooping  it 
up  for  her  schoolmates  as  they  strutted  their  stuff 
on  the  catwalk  during  the  Charm  School  business 
fashion  show.  It  was  the  final  event  before  MIT  Pres¬ 
ident  Charles  M.  Vest,  clad  in  a  hard  hat  bearing  the 
school’s  logo,  conferred  Charm  School  degrees  on 
students,  following,  of  course,  a  kazoo  rendition  of 
“Pomp  and  Circumstance.” 

“It’s  my  first  doctorate,”  says  Han,  who  learned 
how  to  tip  a  maitre  d’  and  to  pass  the  salt  counter¬ 
clockwise  in  her  classes.  “It  feels  good.  It  was  a  lot 
of  hard  work,  though.”  > 


MIT’S  ANNUAL 
ONE-DAY  CHARM 
SCHOOL  pokes  fun 
at  the  college’s  repu¬ 
tation  for  turning  out 
brainy  nerds.  But  it 
|  also  offers  practical 
|  lessons  in  areas 
]  such  as  wardrobe 
I  and  social  etiquette 
I  that  may  come 
I  in  handy  for  job- 
I  seeking  graduates. 


JOB  HUNT 
ETIQUETTE  101 
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It  may  require  some  extra  legwork,  but 

make  sure  to  personalize  the  salutation  in  your 
cover  letter,  says  Allison  Hemming,  president  of 
recruiting  firm  The  Hired  Guns. 

© 

Hone  your  administrative  skills,  even  if  it 
means  working  in  Mom  or  Dad’s  store  for  a  while, 
says  Luc  LaFontan,  vice  president  of  corporate 
technology  at  About.com. 

© 

Take  advantage  of  your  alumni  network, 

but  don’t  expect  a  stranger  to  help  you  off  the  bat, 
says  Hemming.  Start  with  an  e-mail  or  letter  asking 
for  an  informational  phone  interview. 

© 

Demonstrate  your  eagerness  to  learn  and 
grow  on  the  job,  says  Robert  Bowman,  an  informa¬ 
tion  manager  at  Xerox.  Don’t  expect  your  first 
job  to  be  in  management. 

© 

Dress  at  least  one  step  up  on  interviews,  erring 
on  the  side  of  formality,  says  Hemming.  So  if  every¬ 
one  in  a  company  wears  khakis,  wear  a  sports  jacket. 
If  everyone  wears  sports  jackets,  wear  a  suit. 

© 

Try  to  take  summer  jobs  in  your  discipline  to 
show  your  commitment  to  IT,  suggests  Bowman. 

Q 

Create  a  job-searching  group  with  friends, 

where  you  share  ideas  about  resumes,  cover 
letters  and  interviews. 


software 


IN  THIS  GAME,  THERE 
CAN  BE  NO  TIMEOUTS 


NO  DELAYS.  NO  STOPPAGE 


e-business.  It’s  the  only  game  in  town.  And  downtime  means  losing  profits  and  opportunities,  so  you 
can’t  let  it  happen.  IBM  Tivoli  software  lets  you  predict  the  business  impact  of  the  technology  you’re 
responsible  for,  so  that  you  can  make  smarter  decisions  today.  Tivoli.  Part  of  our  winning  software  team, 


along  with  DB2?  Lotus®  and  WebSphere®  To  find  out  more  view  our  Webcast  at  ibm.com/tivoli/smarter 


WEBSPHERE  ISN’T 


JUST  A  PLATFORM  FOR 


WEB  SERVICES 


Winning  through  integration.  A  recent  study  found  that  IBM  WebSphere  infrastructure  software  is  the  Web 
services  platform  of  choice  for  early  adopters.  Why?  Because  it  connects  more  applications,  platforms, 
processes  and  people  than  any  other  software.  WebSphere.  Part  of  our  Web  services-enabling  software 
team,  along  with  DB2f  Lotus®  and  Tivoli®  Get  a  free  Web  Services  Toolkit  at  ibm.com/websphere/winning 


Lotus,  software 

WINNING  TAKES  MORE 
THAN  TEAM  CHEMISTRY. 

IT  TAKES  TEAM  SOFTWARE. 


Team  communication  is  everything.  Lotus  collaboration  software,  with  online  meeting  spaces  and  secure  corporate 
instant  messaging,  makes  communication  instant,  so  every  project  goes  down  in  the  “win”  column.  Lotus.  Part  of  our 
winning  software  team,  along  with  DB2?  Tivoli®  and  WebSphere®  Check  out  our  Webcast  at  ibm.com/lotus/team 
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(©  business  is  the  game.  Play  to  win: 


DB2  ROCKS  WHEN 


IT  COMES  TO  UNIX 


SMISgi 


LINUX.  WINDOWS. 


mm 
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AND  CHECKBOOKS 


Benchmarks  prove  it.  Customers  swear  by  it.  DB2  is  a  better  distributed  database  than  Oracle.  Not  to  mention 
more  manageable  and  more  affordable.  And  because  it  can  work  across  any  platform,  it’s  the  perfect 
database  for  companies  large,  small,  and  growing.  DB2.  Part  of  our  winning  software  team,  along  with 
Lotus!”  Tivoli®  and  WebSphere®  Check  out  the  benchmarks  and  get  a  free  TOO  report  at  ibm.com/db2/rocks 
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(e)  business  is  the  game.  Play  to  win: 
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International  Business  Machines 
Open  Group  in  the  United  States 
Corporation.  All  rights  reserved. 
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CAMPUS  to 


IT’S  tough  to  counsel  patience  to  eager 
young  people  who  are  steeped  in  confidence¬ 
boosting  career  advice,  their  ears  ringing  with 
praise.  It’s  tougher  still  when  they  came  of  age 
in  boom  times. 

All  the  same,  college  seniors  and  master’s  candi¬ 
dates  aiming  for  IT  jobs  face  a  much  less  welcoming 
employment  scene  than  their  predecessors  did  just 
two  years  ago. 

It  wasn’t  so  long  ago  that  high-flying  dot-coms  and 
even  Old  Economy  players  from  all  corners  were  toss¬ 
ing  fat  salaries  and  hefty  bonuses  at  tech-sawy  stu¬ 
dents.  But  now,  current  degree  candidates  are  getting 
a  lesson  in  the  virtues  of  networking  and  internships. 

To  be  sure,  fewer  entry- 
level  IT  candidates  spent 
their  spring  break  sifting 
through  piles  of  offers. 
MIT  senior  Carlos  Ar¬ 
mando  Garcia,  who  landed  a  job  at  New  York-based 
Merrill  Lynch  &  Co.’s  technology  group  in  November, 
noticed  a  steep  drop-off  in  employer  attendance  at 
campus  job  fairs.  Most  notably  absent  have  been  ven¬ 
ture  capital-fueled  start-ups,  leaving  the  field  to  larg¬ 
er,  established  companies,  according  to  the  electrical 
engineering  and  computer  science  major. 

A  year  or  two  ago,  “about  80%”  of  the  companies  at 
MIT’s  job  fairs  “were  software-related  companies, 
start-ups  or  medium-size  companies  looking  for  pro¬ 
grammers.  They  were  offering  salaries  between 
$60,000  and  $100,000.  Now,  the  best  salary  you  can 
get  for  an  undergraduate  is  about  $55,000,”  says 
Garcia,  who  hooked  up  with  Merrill  Lynch  at  an 
on-campus  technical  presentation  given  by  the 
company. 

“There  are  always  opportunities  out  there,  but  it’s 
taking  longer,  and  students  have  to  try  harder,”  says 
Jan  Kendall,  a  career  counselor  at  Boston  University 
who  works  in  BU’s  science  and  engineering  programs. 
“Two  years  ago,  strong  candidates  were  getting  five 
and  six  offers  and  signing  bonuses.  Now,  it’s  not  at  all 
like  that.” 

Indeed,  recruitment  is  down  from  its  recent  peak  of 
1999  and  2000,  says  Kendall.  “Last  year  wasn’t  the 
greatest,  and  this  year  is  worse,”  she  adds. 


Top  or  Bottom? 

Whether  the  economy  is  near  the  end  of  a 
downslide  or  the  beginning  of  a  recovery,  it’s  clearly 
in  low  gear.  Consequently,  IT  jobs  once  thought  to  be 
in  endless  supply  are  harder  to  come  by. 

According  to  a  survey  conducted  last  month  by  the 
National  Association  of  Colleges  and  Employers 
(NACE)  in  Bethlehem,  Pa.,  companies  across  the 
board  expect  a  36%  drop  in  their  hiring  of  new  gradu¬ 
ates  from  all  bachelor  programs  this  year. 

Among  employer  types  covered  in  NACE’s  winter 
2002  salary  survey,  computer  systems  design,  consult¬ 
ing  and  programming  ranked  16th  in  terms  of  the 
number  of  job  offers,  down  from  5th  in  2001.  The  cate¬ 
gory’s  average  starting  salary  offer  also  fell  from 
$47,599  in  2001  to  $46,208  in  2002. 

People  who  hold  master’s  degrees  generally  step 
higher  onto  the  IT  ladder,  given  their  skills,  but  they 
face  similarly  diminished  prospects. 

The  tight  economy  means  more  students  are  opting 
to  stay  in  school,  which  allows  them  to  forestall  loan 


OCCUPATIONAL 

STAMINA 

Despite  the  current  down  market,  many 
occupations  with  the  highest  projected  growth 
are  in  computer-related  fields  (in  thousands). 

Software  engineers,  applications 


380 


Software  engineers,  systems  software 


284 


Systems  analysts 


258 


Elementary  school  teachers,  except  special  education 


202 


Network  and  computer  systems  administrators 


187 


Accountants  and  auditors 


181 


Computer  and  information  systems  managers 


150 


Management  analysts 


145 


Financial  managers 


122 


Sales  managers 


112 


Computer  programmers 


95 


CEOs 


94 


Preschool  teachers,  except  special  education 


85 


Securities,  commodities,  financial  services  sales  agents 


82 


Medical  and  health  services  managers 


81 


BASE:  Employment  growth  from  2000  to  2010  in  selected  occupa¬ 
tions,  usually  requiring  a  bachelor's  degree  or  higher  plus  work 
experience. 

SOURCE:  OCCUPATIONAL  OUTLOOK  QUARTERLY. 

WINTER  2001  02 


payments  and  bolster  their  skills.  MIT’s  popular  five- 
year  master’s  program  in  electrical  engineering  and 
computer  science  saw  a  spike  in  interest  from  under¬ 
graduates  looking  to  stay  on  this  year,  according  to 
Garcia. 

While  the  economic  slump  doesn’t  change  the  basic 
skills  required  to  land  work,  candidates  can  gain  an 
edge  if  they  meet  employers’  demands  for  technolo¬ 
gists  who  can  put  IT  into  business  context. 

Organizational  skills  are  at  the  top  of  employers’  IT 
department  wish  lists,  according  to  a  survey  by  Cam¬ 
bridge,  Mass.-based  Forrester  Research  Inc.  “By  far, 
project  management  is  top.  It’s  been  an  issue  for 
years,”  says  analyst  Tom  Pohlmann.  Strategic  thinking 
and  planning  ranked  No.  2  among  the  desirable  skills 
sought  by  IT  managers,  Forrester  says. 

During  the  slump,  Columbus,  Ohio-based  financial 
services  giant  Nationwide  has  reduced  its  hiring  of 
new  graduates  and  is  relying  more  on  its  college  in¬ 
ternship  program,  according  to  Carolyn  Highley,  a  se¬ 
nior  recruiter  in  the  systems  departments  at  both  Na¬ 
tionwide  Insurance  Co.  and  Nationwide  Financial 
Services  Inc.  Still,  the  company  hasn’t  trimmed  its  in¬ 
ternal  training  programs  or  tuition  reimbursement, 
she  notes. 

And,  as  internal  staffers  move  up,  the  IT  pipeline 
will  continue  to  be  open.  “With  a  company  as  large  as 
Nationwide,  we’re  going  to  constantly  need  new 
people;  we  just  don’t  need  them  in  the  large  numbers 
that  we  did  before,”  says  Highley. 

Favorable  Figures 

Despite  the  doom  and  gloom  of  the  high-tech  melt¬ 
down,  the  long-term  demand  for  IT  labor  remains  sol¬ 
id.  Of  the  departments  covered  in  Forrester’s  report 
on  white-collar  personnel  management,  IT  recruited 
the  most  and  still  cited  a  shortage  of  qualified  candi¬ 
dates,  indicating  healthy  long-term  demand. 

According  to  statistics  from  the  U.S.  Department  of 
Labor,  the  U.S.  workforce  is  expected  to  reach  nearly 
156  million  by  2010,  gaining  roughly  22  million  jobs. 
Computer  and  data  processing  services  look  to  ac¬ 
count  for  about  1.8  million  of  that  increase,  growing  at 
a  strong  86%  clip,  according  to  the  Bureau  of  Labor 
Statistics.  ► 


Bowen  is  a  freelance  writer  in  Boston.  Contact  him  at 
ted_bowen@hotmail.com. 


JOB  CONNECTIONS 


For  a  listing  of  various  job  boards,  IT  employment  Web  sites  and  other 
related  sites  of  interest,  please  visit  our  Web  site: 


OQuickLink:  29745 

www.computerworld.com 


At  the  height  of  the  dot-com  frenzy,  employers  were 
throwing  cash,  bonuses  and  other  goodies  at  college  grads. 
Welcome  to  the  grim  economy.  BY  TED  SMALLEY  BOWEN 


Market  Blues 


Go  ahead,  throw  out  your  pager.  The  whole  idea  of  outsourcing  is  to  let  us  do  the 
problem  solving  for  you.  Verio  is  the  one  company  more  IT  people  trust  than  any  other 
hosting  provider  on  earth.  We're  a  part  of  NTT  Communications ,  the  world's  largest 
telecommunications  corporation.  We  host  thousands  of  dedicated  servers  and  support 
each  and  every  one  with  the  most  obsessive  tech  staff  in  the  industry.  When  you  have  an 
NTTA/ERIO  dedicated  server,  you  can  dedicate  your  time  to  more  important  things. 


If  I  threw  away  my  pager, 
could  you  handle  my  hosting? 


0 


$  I  if  If  mo  >  DEDICATED  SERVER 

No  set-up  fees. 


Sign  up  now  at  www.verio.com/ds5  or  call  877-624-7891. 

Offer  includes  Intel-Based  Standard  1  Server.  Offer  is  valid  for  new  customers  only.  One  year  contract  required.  Verio  is  a 
trademark  of  Verio  Inc.  All  other  referenced  product  names  are  trademarks  of  their  respective  owners.  ©  2002  Verio  Inc. 
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In  tough  times,  a  growing 
number  of  companies  are 
turning  to  leasing  hardware 
to  spread  their  costs  out. 

By  Barbara  DePompa  Reimers 

Businesses  are  increasingly  leasing  hard¬ 
ware  as  a  way  to  reduce  upfront  capital 
expenses  while  still  investing  in  new  tech¬ 
nologies  to  keep  pace  with  their  growing 
competitive  needs. 

The  Equipment  Leasing  Association’s  (ELA) 
fourth-quarter  2001  “Performance  Indicators  Report” 
(PIR)  reveals  an  increase  in  new  business  leasing 
volume  of  almost  13%,  compared  with  the  same  peri¬ 
od  in  2000.  First-quarter  2002  leasing  figures,  sched¬ 
uled  to  be  released  this  month,  also  look  strong, 
based  on  preliminary  returns,  according  to  officials 
at  the  Arlington,  Va. -based  ELA.  IT  leasing  makes  up 
about  15%  of  all  types  of  equipment  leasing. 

Customers  say  the  benefits  of  leasing  from  hard¬ 
ware  suppliers  directly  include  regular  technology 
upgrades  and  less  finger-pointing,  since  the  vendor 
is  the  single  point  of  contact  on  both  equipment  and 
contract  issues.  The  primary  drawbacks  are  the  lack 
of  control  associated  with  not  owning  the  technolo¬ 
gy  and  being  tied  to  a  single  vendor. 

Analysts  and  IT  managers  agree  that  leasing  hard¬ 
ware  can  reduce  financial  roadblocks  to  investing  in 
big-ticket  IT  projects  (such  as  enterprisewide  cus¬ 
tomer  relationship  management  or  enterprise  re¬ 
source  planning  efforts)  by  spreading  out  costs  over  a 
few  years  or  even  skewing  them  toward  the  back  end 
of  a  project  instead  of  swallowing  the  cost  all  at  once. 

In  mid-2001,  ADP  Brokerage  Services  Group,  a  di¬ 
vision  of  Roseland,  N.J.-based  Automatic  Data  Pro¬ 
cessing  Inc.,  faced  such  a  challenge,  which  it  recently 
resolved  with  help  from  IBM. 

Typically,  it’s  cost-prohibitive  for  a  business  to  re¬ 
place  leased  servers.  The  lease  must  be  paid  off  in 
full  before  new  equipment  can  be  purchased  or 
leased.  But  reliability  problems  on  a  variety  of  Web 
applications  prompted  Dennis  Noto,  ADP’s  vice 
president  of  processing  services,  to  shop  around  for 
a  new  system  with  better  performance  and  higher 


availability.  So  ADP  tapped  IBM,  which  settled  four 
leases  for  servers  from  Sun  Microsystems  Inc.  and 
storage  equipment  from  EMC  Corp.  and  other  ven¬ 
dors.  Then  IBM  replaced  ADP’s  old  equipment  with 
its  own  pSeries/Shark  hardware. 

Through  the  arrangement  with  IBM,  ADP  has 
decreased  its  monthly  lease  expenses  by  25%  and 
gained  three  times  the  performance  of  the  previous 
systems,  says  Noto. 

Off  the  Books 

Companies  typically  take  advantage  of  leasing  to 
get  costly  hardware  assets  off  the  books,  says  Ralph 
Petta,  vice  president  of  industry  services  at  the  ELA. 
IT  hardware  is  the  most  popular  leased  item  after 
transportation  equipment  because  it  depreciates  and 
becomes  obsolete  faster  than  other  assets,  he  says. 

“It  makes  sense  for  companies  to  lease  IT  assets 
from  finance  companies  and  take  advantage  of  regu¬ 
lar  upgrades,”  as  opposed  to  determining  how  to 
get  rid  of  older  equipment  or  interrupting  business 


operations  to  shift  to  new  servers,  Petta  says. 

The  financial  problems  besetting  third-party  lessors 
such  as  Comdisco  Inc.,  which  has  filed  for  bankrupt¬ 
cy  protection,  may  have  some  managers  concerned 
that  the  leasing  industry  is  shriveling  away.  While 
the  industry’s  situation  isn’t  that  dire,  independent 
lessors  have  suffered  because  “as  product  cycles 
have  accelerated,  it  has  become  increasingly  difficult 
for  these  lessors  to  profitably  resell  3-year-old  leased 
technology,”  says  Rob  Schafer,  program  director  at 
Meta  Group  Inc.  in  Stamford,  Conn. 

But  that  doesn’t  mean  leasing  isn’t  popular.  “We 
decreased  our  hardware  costs  by  70%  and  increased 
our  server  capacity  by  30%”  over  the  past  year,  thanks 
to  a  new  leasing  arrangement,  says  Dan  Agronow, 
vice  president  of  technology  at  Weather.com  in  At¬ 
lanta.  Weather.com  switched  from  a  Sun  Solaris  plat¬ 
form  to  an  IBM/Intel  environment  running  Linux 
and  WebSphere. 

In  the  beginning, 


LINKS  TO  LEASING 

To  visit  sites  that  offer  more  about 
the  advantages  and  disadvantages 
of  leasing  IT  equipment,  go  to: 


OQuickLink:  29715 

www.computerworld.com 


Agronow  replaced  about 
12  big  database  servers 
(Sun  45  Servers  that  cost 
about  $50,000  each) 
with  22  less-costly 
NetFinity  servers  (at 
about  $7,500  each)  and  got  the  same  performance 
for  $435,000  less.  The  company  now  leases  multiple 
IBM  xSeries  servers  running  database,  content,  im¬ 
age,  Common  Gateway  Interface  and  Web-logging 
applications. 

The  potential  disadvantage  of  being  locked  into  a 
single  vendor  doesn’t  bother  Noto  or  Agronow.  Says 
Agronow,  “I  have  no  worries  about  what  to  do  with 
older  technology,  and  the  homogeneous  environ¬ 
ment  is  much  easier  to  manage  than  a  heterogeneous 
environment.”  I 

DePompa  is  a  writer  and  editor  in  Germantown,  Md. 
Contact  her  at  bdepompa@aol.com. 


Choosing  a  Financing  Provider 


VENDOR  LESSORS  (IBM,  HP,  EMC  AND  OTHER  TECHNOLOGY  MANUFACTURERS) 

PROS:  These  lessors  are  most  familiar  with  the  vagaries  of 

IT  leasing,  including  software  and  services. 

j 
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CONS:  With  the  exception  of  IBM  Global  Financing 

Services,  which  has  $40  billion  in  assets,  few  of  these 
lessors  possess  the  resources  to  finance  hardware,  software 
and  services,  and  often  subcontract  to  third-party  lessors. 
Those  handoffs  can  result  in  more  finger-pointing  and 
confusion  and  less  direct  contact  with  the  hardware  manu¬ 
facturer. 

SERVICES  PROVIDERS  (EMC,  COMPUTER  SCIENCES  CORP.  AND  SOME  OF  THE  BIG  FIVE  ACCOUNTING  FIRMS) 

PROS:  They  possess  a  strong  focus  on  the  service  seg¬ 
ment  of  an  IT  project. 

CONS:  They  can  have  relatively  inflexible  terms  and 
conditions. 

FINANCIAL  SERVICES  INSTITUTIONS  (GE  CAPITAL  CORP.  AND  OTHERS)  _  ' 

PROS:  These  providers  have  deep  pockets,  aggressive 
rates  and  initial  negotiating  flexibility. 

CONS:  Most  possess  limited  IT-specific  expertise  because, 
typically,  they  are  generic  financing  organizations. 

COMMERCIAL  BANKS 

PROS:  They  offer  loans  to  all  kinds  of  businesses. 

CONS:  These  providers  are  usually  the  least  attractive,  be¬ 
cause  they’re  considered  conservative,  non-IT-focused 
generic  lessors,  typically  with  less-aggressive  rates  and 
inflexible  terms  and  conditions. 

SOURCE:  ROB  SCHAFER.  PROGRAM  DIRECTOR.  META  GROUP  INC.,  STAMFORD.  CONN. 
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Alphabet  Soup:  CIO  Becomes 
COI,  Starts  Supervising  CFO 


A-dec  has  turned 
its  management 
structure  on  its  ear 


BY  MARK  HALL 

No  matter  what  anyone  says, 
titles  matter.  They  send  a  mes¬ 
sage  about  the  job  —  and  the 
person  doing  it. 

“If  you’ve  got  a  CIO  title, 
people  think  you’re  a  computer 
guy,”  says  Charles  Cook,  vice 
president  and  general  manager 
at  A-dec  Inc.  in  Newberg,  Ore. 
But  the  maker  of  dental  office 
furniture  and  equipment  want¬ 


ed  an  executive  to  oversee 
more  than  just  IT.  “We  want 
someone  to  identify  and 
streamline  all  of  our  informa¬ 
tion  needs.  That’s  why  the  title 
is  chief  of  information,”  says 
Cook. 

The  new  position,  created  in 
a  companywide  reorganization 
in  February,  puts  Keith  Bear- 
don,  A-dec’s  former  CIO,  in  the 
unique  role  of  COI. 

“I’ve  seen  CIO  titles,  of 
course,  but  not  COI,”  observes 
W.  Scott  Sherman,  a  professor 
at  the  Graziadio  School  of 
Business  and  Management  at 
Pepperdine  University  in  Cul¬ 
ver  City,  Calif.  “It’s  clearly  a  ti¬ 


tle  that  means  information 
means  something  special  to 
the  company.” 

Cook  underscores  that 
point.  “We  want  to  keep  the  re¬ 
ality  of  information’s  impor¬ 
tance  to  the  business  in  the 
forefront,”  he  says. 

To  that  end,  as  part  of  the  re¬ 
organization,  Cook  has  A-dec’s 
chief  Financial  officer  report¬ 
ing  to  Beardon,  a  structure  that 
Sherman  says  he’s  never  seen 
before. 

But  Cook,  who  is  the  sole  ex¬ 
ecutive  reporting  to 
the  company’s  own¬ 
ers,  has  specific  rea¬ 
sons  for  putting  his 
CFO  under  the  COI, 
who  is  now  on  par 
with  Cook’s  other  di¬ 
rect  reports  —  includ¬ 
ing  the  vice  presidents 
of  manufacturing,  hu¬ 
man  resources,  sales 


and  product  development. 

A-dec  is  privately  held,  and 
at  a  privately  held  company, 
the  CFO  doesn’t  have  treasury 
duties  —  such  as  filings  with 
the  Securities  and  Exchange 
Commission  —  that  a  public- 
company  CFO  would  shoulder, 
says  Cook.  But  he  also  points 
out  that  “financial  information 
is  just  that:  information.  It’s 
used  to  make  decisions  like 
manufacturing  or  sales-order 
information.” 

CFO  Alan  Steiger  says  he’s 
happy  with  the  choice 
of  Beardon  as  his 
boss.  Steiger,  who  had 
been  on  a  peer  level 
with  Beardon,  says 
he’s  looking  forward 
to  redesigning  some 
of  the  IT  reporting 
systems  for  finance  to 
help  improve  A-dec’s 
budgeting  process. 


Beardon  says  he  and  Steiger 
“have  a  great  working  relation¬ 
ship,  and  what  he  is  looking  to 
me  for  as  a  boss  is  really  the 
strategic  direction  of  how  in¬ 
formation  fits  into  the  compa¬ 
ny  and  more  specifically  where 
financial  information  fits.” 

Cook  considers  the  new  po¬ 
sition  a  tough  one.  “Keith’s 
challenge  will  be  to  under¬ 
stand  our  information  needs  in 
totality  and  how  to  get  infor¬ 
mation  in  and  out  of  the  right 
departments  in  an  economic 
and  complete  way,”  he  says. 
“He  needs  to  look  at  informa¬ 
tion  holistically  in  the  way  we 
run  the  business.” 

Cook  says  that  Beardon  was 
right  for  the  job  because  he  has 
“proven  auditing  skills,  which 
will  come  in  handy”  for  look¬ 
ing  at  how  different  depart¬ 
ment  data  silos  can  relate  to 
one  another.  ► 


BEARDON:  A-dec’s 
chief  of  information. 
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Tripwire  is  The  Data  Integrity  Assurance  Company 


Increase  Control  and  Stability 

U  Ongoing  monitoring  and  reporting 

Lower  Costs 

■  Find  and  fix  problems  quickly  and  precisely  - 
no  more  guess  work 

Your  firewalls  and  intrusion  detection  tools  alone  are 
not  enough  to  keep  systems  trustworthy.  Tripwire’s  data 
integrity  assurance  products  are  the  only  way  to  know 
with  100%  confidence  that  your  data  remains  uncompro¬ 
mised.  For  nearly  10  years  Tripwire  has  been  helping  IT 
professionals  know  exactly  what’s  changed  on  their 
systems,  and  helping  them  to  recover  quickly. 
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THE  DATA  INTEGRITY  ASSURANCE  COMPANY 


Maximize  System  Uptime 

■  Eliminate  risk  and  uncertainty 

■  Enable  quick  restoration  to  a  desired  state 


For  a  FREE  30-day 
fully-functional  eval, 

call  toll-free:  1.800.TRIPWIRE 
(874.7947)  or  visit 

http://enterprise.tripwire.com 

today! 


Tripwire®  establishes  a  baseline  of  data  in  its  known  good 
state,  monitors  and  reports  any  changes  to  that  baseline, 
and  enables  rapid  discovery  and  recovery  when  an 
undesired  change  occurs. 


Foundation  for  Data  Security 

■  Ensure  the  integrity  of  your  data 

■  Instant  assessment  of  system  state,  reporting 
“integrity  drifts" 
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With  Avaya,  you’re  already  this  close  to  IP  Telephony. 


In  fact,  you  can  use  what’s  in  your  own  network.  Now  Avaya,  the  leader  in  voice  solutions, 
has  extended  IP  Telephony  to  an  open  architecture.  So  our  feature-rich  MultiVantage ” 
Software  can  work  with  your  existing  investment,  allowing  you  to  have  Enterprise  Class  IP 
Solutions  anywhere  in  your  network.  That  means  you  get  gentle  migration  and  flexible 
deployment  from  the  core  to  the  edge,  or  the  other  way  around.  Learn  how  a  network 
assessment  can  help  you  discover  how  close  you  are  to  IP  Telephony.  Visit  avaya.com/yes 


COMMUNICATION  WITHOUT  BOUNDARIES 


45 
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Dear  Career  Adviser: 

I  am  a  chemical  process-control  consulting 
engineer ,  who  has  spent  much  time  program¬ 
ming  — for  example ,  in  Perl,  C,  Fortran,  Mathe- 
matica,  FoxPro  and  proprietary  controller  RT 
languages.  I  am  contemplating  a  career  change 
from  process-control  consulting  to  engineering/ 
scientific  programming  at  a  large  chemical  or 
petroleum  refiner.  I  have  five  years  of  post¬ 


graduate  experience  involving  program¬ 
ming  and  worked  overseas  as  an  engi¬ 
neering  intern  for  six  months.  How  do  I 
get  from  here  to  there? 

—  Looking  Around 

Dear  Recently: 

You  might  consider  shifting  your 
skills  from  chemical  process  control  to 
electronic  design  automation  (EDA), 
which  is  a  fundamental  underlying 
technology  that  has  held  up  very  well 
in  this  recession  and  continues  to  gar¬ 
ner  significant  investment  dollars, 
counsels  Ted  Miracco,  executive  vice 
president  of  Applied  Wave  Research 
Inc.  in  El  Segundo,  Calif.  Applied  Wave 
specializes  in  software  used  to  design 
the  chips  that  go  inside  cell  phones 
and  other  wireless  technologies. 

From  a  skills  perspective,  transition¬ 
ing  to  EDA  requires  a  move  from  struc¬ 
tured  programming  (Fortran,  C)  to  ob¬ 
ject-oriented  programming  (C++)  and 
scripting  languages  such  as  JavaScript, 
Perl  and  Visual  Basic. 

Since  the  focus  of  EDA  is  on  electro¬ 
magnetics,  you  will  also  need  to  show 
that  you  can  turn  scientific  equations 
into  usable  code  that  performs  simula¬ 
tions  to  automate  the  design  process 
and  that  you  can  create  applets  that 


step  users  through  the  process.  But 
since  you  already  have  the  discipline 
to  do  programming  in  the  chemical- 
process  arena,  you  certainly 
would  have  the  ability  to 
translate  formulas  into 
software. 

Finally,  investigate  EDA 
as  a  move  to  expand  your 
career  choices.  EDA  is  used 
to  design  all  of  the  chips 
produced  by  the  semicon¬ 
ductor  industry.  And  even 
in  bust  times,  semiconduc¬ 
tor  and  electronics  compa¬ 
nies  still  need  to  invest  in 
their  design  tools. 

Dear  Career  Adviser: 

I’m  a  software  engineering  recruiter 
with  five  years  of  experience,  working 
mostly  on  the  permanent  placement 
side.  However,  I  am  seeing  more  new 
openings  on  the  contract  side  at  the  mo¬ 
ment  and  wonder  whether  I  should  pur¬ 
sue  recruiting  on  the  contracting  rather 
than  the  permanent  side. 

—  What’s  Involved 

Dear  Involved: 

Companies  are  generally  more  will¬ 


ing  to  hire  contract  employees  when 
the  economy  is  recovering,  as  seems 
the  case  now. 

But  before  you  decide  to  make  a 
change,  you  might  be  wise  to  do  a 
lot  more  homework,  advises  Herb 
Tieger,  president  of  Campbell,  Calif.- 
based  Pacific  NetSoft  Inc.,  an  IT  con¬ 
tracting  firm. 

Even  though  you  might  be  excited 
by  a  $50-per-hour  differential  between 
the  “bill  rate,”  the  rate  the  client  pays, 
vs.  the  “pay  rate,”  the  rate  your  con¬ 
tractor  earns,  these  margins  get  eaten 
up  quickly. 

“Involved  will  have  to  arrange 
to  payroll  her  contractors,  handle 
their  Social  Security  and  [FICA  con¬ 
tributions],  never  mind  other  basic 
statutory  coverages  such  as  unem¬ 
ployment  insurance,  worker’s  com¬ 
pensation  and  disability  insurances,” 
says  Tieger. 

Plus,  you  might  find 
yourself  pitted  against  al¬ 
ready  entrenched  consult¬ 
ing  firms  with  years  in 
the  business  or  footing 
the  bill  to  cover  the  inter¬ 
est  on  money  you  will 
need  to  pay  your  contrac¬ 
tors  out  of  the  fees  your 
clients  pay  you,  he  adds. 

And  there  are  other  con¬ 
siderations.  You  might 
need  insurance  coverage 
against  the  employment 
practices  of  the  companies 
hiring  contractors,  fidelity 
bonds  to  cover  contractors 
working  on  financial  systems,  and  er¬ 
rors  and  omissions  insurance  to  cover 
the  potential  “malpractice”  of  the  tech¬ 
nical  consultant,  according  to  Tieger. 

Ultimately,  instead  of  beginning 
your  own  consulting  agency,  you  might 
be  better  off  setting  up  your  contrac¬ 
tors  to  be  payrolled  either  through  an¬ 
other  more  established  company  or  a 
professional  employment  organization 
until  you  know  for  certain  that  your 
contracting  business  will  succeed, 
Tieger  advises.  I 


Survey:  Internet,  Software 
Are  Top  Growth  Sectors 

CEOs  believe  that  the  Internet,  software  and 
life  sciences  industries  will  offer  the  greatest 
revenue  growth  potential  in  the  coming  year, 
according  to  a  poll  in  Deloitte  &  Touche  LLP’s 


Fast  500  index.  The  CEOs  also  predicted  that 
North  America  will  lead  the  world  in  terms  of 
growth  and  opportunities  in  the  overall  high- 
tech  marketplace. 


CIO  Survey:  Tech  Spending 
Rebound  Still  A  Year  Off 

Regardless  of  any  general  economic  im¬ 
provements,  IT  spending  isn’t  expected  to 


rebound  this  year,  warned  executives  from 
Merrill  Lynch  &  Co.  during  a  briefing  held  in 
New  York  last  week. 

Still,  spending  on  voice  over  IP,  security, 
videoconferencing  and  Linux  is  expected  to 
grow  over  the  next  several  years,  according  to 
a  recent  survey  of  74  U.S.  and  European  CIOs 
that  Merrill  Lynch  conducted. 

Storage,  customer  relationship  manage¬ 
ment  and  systems  integration  are  likely  to 
experience  marginal  growth  this  year,  said 
Merrill  Lynch  analyst  Steve  Milunovich. 


IP  Telephony. 
Where  to  start? 

With  Avaya  Enterprise  Class 
IP  Solutions  (ECLIPS) 
featuring  MultiVantage" 
Software,  start  anywhere 
in  your  network. 


S8700  Media  Server 


At  the  core. 

•  Delivers  up  to  99.999% 
reliability 

•  Scalable  from  20  to 
1  million  users 


i 


G700  Media  Gateway 


At  the  edge. 

•  Survivable  remote  location 

•  Standards-based  distributed 


architecture 
•  Cost-effective  option 


With  a  specific  workgroup. 

•  First  to  seamlessly  extend 
applications  to  cellular 

•  Takes  applications  to  remote 
and  mobile  workers  for 
greater  productivity 


Learn  how  a  network  assessment  can 
help  you  discover  how  close  you  are 
to  IP  Telephony.  Visit  avaya.com/yes 
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There's  a  Dell  PowerEdge  server 
with  Windows®  2000  Server 


From  "kind  of  start  up"  to  "kind  of  FORTUNE  500 


jam? 


No  matter  the  size  of  your  company,  we've  got  a  server  that  fits.  Dell  PowerEdge  servers  with  Windows®  2000  Server  operating  system  have  many 

amazing  "abilities":  scalability,  availability,  manageability  and  serviceability.  So  they  grow  with  your  business,  minimize  downtime,  are  easy  to  integrate 

and  even  easier  to  support.  No  matter  what  your  business  needs  -  from  file/print  to  database  management  -  you  can  choose  the  server  with  Microsoft®  eQmo  ae  „.h 

S3fnB“3S"C9Sn 

Windows®  2000  Server  operating  system  that  is  right  for  you.  And,  by  dealing  direct  with  Dell,  you  get  a  system  customized  to  fit  your  business  needs,  quanta  custom-0 

at  an  affordable  price,  backed  by  our  award-winning  service  and  support.  It's  a  nice  mix  of  exactly  the  server  you  need  with  exactly  the  operating  system  you  want. 

PC  Magazine  Editors'  Choice  Award 

Small  Business  Solutions 
-  April  2002 


Dell  Small  Business 


PowerEdge™  1500SC  Server 

NEW  Simple  and  Strong  Tower  Server 

•  Intel®  Pentium®  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM  (up  to  4GB) 

•  18GB5  (10K  RPM)  Hot-Swap  Ultra3  SCSI  Hard  Drive 

•  Embedded  Dual-Channel  Ultra3  SCSI  Controller 

•  Embedded  Intel®  PRO  Gigabit  NIC 

•  1-Yr  Next  Business  Day  On-Site  Service,5 1  -Yr  Limited  Parts 
Warranty5 1-Yr  24x7  Dedicated  Server  Phone  Tech  Support 

£  &  or  as  low  as  $37/mo„  46  payments50  60 

«j)  I  days  same-as-cash  for  qualified  customers. 

IL  VV  E -VALUE  Code:  11477-290512 

Recommended  upgrades: 

•  NEW  PowerConnect"  2124* * *  24-Port  Unmanaged  Switch 
with  Gigabit  Port,  add  $299 

•  System  Including  Small  Business  Server  2000  and 
Memory  Upgrade  to  256MB  is  $2699 


PowerEdge™  1650  Server 

NEW  Highly  Available  1U  Rack-Optimized  Server 

•  Intel®  Pentium®  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM  (up  to  4GB) 

•  18GB5  (1  OK  RPM)  Hot-Swap  Ultra3  SCSI  Hard  Drive 

•  Dual  Embedded  Gigabit  NICs 

•  Hot-Swap,  Redundant  Cooling  Fans 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  Optional  Redundant  Power  Supplies 

•  3-Yr  Next  Business  Day  On-Site  Service5 

jm  or  as  low  as  $48/mo.,  46  payments.50  60 

^  T  1*%  wflfl  days  same-as-cash  for  qualified  customers. 

I  W  V  E-VALUE  Code:  11477-290516 


Recommended  upgrade: 

•  System  Including  Windows®  2000  Server  is  $2499 


PowerEdge™  2500  Server 

Robust  and  Scalable  Tower  Server 

•  Intel®  Pentium®  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM  (up  to  6GB) 

•  18GB5  (1  OK  RPM)  Hot-Swap  Ultra3  SCSI  Hard  Drive 

•  Embedded  Dual-Channel  Ultra3  SCSI  Controller 

•  Embedded  Intel®  10/100  NIC 

•  Hot-Swap,  Redundant  Cooling  Fans 

•  Optional  Hot-Swap,  Redundant  Power  Supplies 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  3-Yr  Next  Business  Day  On-Site  Service5 

or  as  low  as  554/mo.,  46  payments50  60 
1 days  same-as-cash  for  qualified  customers. 

IUvW  E-VALUE  Code:  11477-290518 


Recommended  upgrades: 

•  PowerConnect"  3024*  24-Port  Managed  Switch,  add  $699 

•  System  Including  Windows®  2000  Server  is  $2699 


PowerVault™  PV715N  Storage 

NEW  NAS  File  Sharing  Storage 

•  Offloads  Storage  Load  from  Desktops  and  Servers 

•  Snap  Shot  Capability  for  Backing  up  Stored  Data 

•  Intel®  Celeron”1  Processor  at  900MHz 

•  256MB  SDRAM  (up  to  512MB) 

•  160GB  IDE  Hard  Drive  -  Four  40GB  Bays 

•  Dual  10/100  Ethernet  Ports 

•  SCSI  Port  for  Local  Backup 

•  Multi-Platform  Support  of  PC.  Unix,  Apple,  and  Novell 

•  Powered  by  Windows®  Operating  System 

•  1-Yr  Next  Business  Day  On-Site  Service,5  3-Yr  Limited  Parts 
Warranty,5  Lifetime  24x7  Dedicated  Server  Phone  Tech  Support 

or  as  low  as  $51/mo.,  46  payments50  60 

5  J  #1111  days  same-as-cash  for  qualified  customers. 

I  I  E-VALUE  Code:  11477-290517n 


pentium®/// 


Servers  for  any  size  business.  Easy  as 


D*LL 


Visit  www.dell.aom/computerworld  or  call  toll  free  1-800-284-1210. 
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Pdcing*^™fications.*avad3bility  and  terms  of  offer  may  change  without  notice.  Taxes  and  shipping  charges  extra,  and  vary.  U  S.  Dell  Small  Business  (BSD  and  BASDI  new  purchases  only  Dell  cannot  be  hold 
responsible  for  errors  in  typography  or  photography. 

•Tins  device  has  not  been  approved  by  the  Federal  Communications  Commission  lor  use  in  a  residential  environment.  This  device  is  not,  and  may  not  be,  offered  lor  sale  or  lease,  or  sold  or  leased  for  use  in  a 
residential  environment  until  the  approval  of  the  FCC  has  been  obtained. 

■for  a  com/  of  our  Guarantees  or  Limrted  Warranties,  write  Dell  USA  L.P.  Ann  Warranties,  One  Dell  Way.  Round  Rock,  Texas  78682.  'Service  may  be  provided  by  third  party.  Technician  will  bo  dispatched,  if 
n^l^TfabSSe^ased  troubleshooting  To  receive  Next  Business-Day  service,  Dell  must  notify  service  provider  before  5  pm  (deeding  *,  service  contract)  customers  time.  Availability  varies  rot  nard 
lh|P  can~ltv  vgnes  with  operation  environment  -■Monthly  payment  Is  based  on  a  48-month  12.99%  interest  rate  for  qualified  business  customers.  Your  interest  rate  and 
mSPlvinern  ™  he nr hfo wrfflinoTwrcrSrtess  Minimum  transaction  size  of  $500  is  required  Maximum  aggregate  financed  amounts  nor  to  exceed  $25,000.  Unde;  GO  Da/s 
monthly  payment  ma/  be  same  or  ‘9  B  ■  “  •{*  (  9  Kr/,  .,  nuickloans  Commencement  Datu  (which  is  five  days  alter  product  smpsi  if  balance  is  not  paid  within  those  60  days  STATED  INTEREST 

le-As-Cash  Qmcltloan,  interest  accrues  during  bra  60  days  anor  the  UumMns  tOTTOncorrwm  udUJiwnKi  is  e  uuy  «  >■  h  ritc'iriMFR  AS  nFTFHMlNFD  BY  I  FNnFR  Ta.ns 


PCs  use  genuine  Microsoft*  Windows* 
www.microsoft.com/piracy/howtotell 
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USE  THE  POWER  OF 
THE  E-VALUE  CODE. 

Match  our  latest  technology 
with  our  latest  prices  Enter  the 

E-VALUE  code  online  or  give  it 

VALUE 

to  your  sales  rep  over  the 
phone  www  dell  cooi/evalue 

If  your  back-end  database  isn't  a  good  match  for  your  front- 
end  development,  you  need  a  new  database.  Cache,  the 
high-performance  database  from  InterSystems,  is  a  powerful 
fusion  of  today’s  mainstream  technologies:  objects  and  SQL. 


Every  Cache  object  is  compatible  with  Java,  C++,  ActiveX, 
and  other  rapid  development  technologies.  And  thanks  to 
Cache’s  “Unified  Data  Architecture,”  every  object  class  is 
instantly  accessible  as  tables  via  ODBC  and  JDBC. 


Unlike  Oracle  and  other  relational  databases,  Cache  takes 
advantage  of  its  efficient  multidimensional  data  engine  to 
implement  an  advanced  object  model.  It  doesn’t  try  to  hide  a 
cumbersome  relational  engine  beneath  object-like  wrappers. 


With  no  mapping  or  middleware.  That  means  no  wasted 
development  time.  And  no  extra  processing  at  run  time. 
So  not  only  will  your  applications  be  quick  to  build  or 
adapt,  they  will  run  faster  too. 


Get  The  Right  Back-End 
For  Your  Front-End. 

InterSystems  f 

E CACHE 

Make  Applications  Faster 


Download  Cache  for  free  or  request  it  on  CD  at  www.lnterSvstems.com/match6 


THIS  WEEK 


FIELD  REPORT:  VOIP 

IP  telephony  promises  to  save 
money  and  improve  service,  but 
plenty  of  obstacles  remain  before 
users  can  take  full  advantage  of 
converged  voice,  data  and  video 
services.  PAGE  50 


QUICKSTUDY 

Anti-aliasing  (right)  smooths  out 
the  jagged  or  stair-stepped  look 
(middle)  of  diagonal  (left)  and 
curved  lines  in  computer  graphics. 
Find  out  how  it  works.  PAGE  54 


HANDS  ON 

If  you’re  planning  to  exchange  data 
with  a  business  partner,  chances 
are  it  will  be  in  XML.  Unfortunate¬ 
ly,  XML’s  greatest  strength  —  its 
self-describing  nature  —  is  also  a 
serious  security  vulnerability. 

PAGE  55 


FUTORE  WATCH 

For  years,  users  have  had  poor  pri¬ 
vacy  and  security  protections  be¬ 
cause  encryption  technology  has 
been  hard  to  use.  New  techniques 
will  change  that  and  make  encryp¬ 
tion  easy  enough  to  attract  most 
users.  PAGE  56 


SECURITY  JOURNAL 

When  a  test  installation  of  a  wire¬ 
less  LAN  leaves  his  company’s  net¬ 
work  exposed,  security  manager 
Mathias  Thurman  decides  on  a 
layered  security  design.  PAGE  57 


NICHOLAS  PETRELEY 

IT  From  Planet  Bizarro 

I  HAVE  ALWAYS  LOVED  comic  books  and  old  science  fiction  movies.  I 
wasn’t  a  big  fan  of  Superman,  but  I  liked  the  stories  about  the  planet 
Bizarro.  Bizarro  was  an  opposite  world,  where  people  set  their  alarm 
clocks  to  ring  when  it  was  time  to  go  to  sleep.  And  for  some  reason  I 
never  quite  understood,  the  Bizarro  people  all  talked  like  Sesame 
Street’s  Cookie  Monster:  “Me  want  cookie.” 


As  for  old  science  fiction  movies,  one  of  my  fa¬ 
vorites  is  the  1956  version  of  Invasion  of  the  Body 
Snatchers,  starring  Kevin  McCarthy. 

The  plot  revolves  around  seed  pods  that  replace 
people  with  identical-looking  but  emotionless 
drones.  The  transformation  occurs  when  the  victim 
falls  asleep  near  a  pod. 

I’ve  only  recently  discovered  that  these  two  seem¬ 
ingly  unrelated  yarns  are  actually  halves  of  a  single 
reality  that’s  unfolding  before  our  eyes.  I’m  con¬ 
vinced  that  aliens  are  hiding  seed  pods  near  our 
beds,  gradually  replacing  us  with  Bizarro  versions  of 
ourselves  as  we  sleep. 

I  should  have  noticed  something  was  wrong  about 
five  years  ago  when  Oracle,  IBM  and  others  tried  to 
promote  network  computing.  IT  decision-makers 
reasoned,  “Me  can  spend  $5  million  in  10  years  with 
network  computing  solution,  or  me  can  spend  $10 
million  in  five  years  with  high-powered  PCs  on  desk¬ 
tops.  Me  save  money  by  purchasing  PCs  and  upgrad¬ 
ing  every  two  years  so  workers  can  play  solitaire  and 
write  e-mail  faster!” 

That  business  strategy  always  struck  me  as  rather 
odd  —  not  to  mention  the  poor  grammar.  But  I  wrote 
off  this  blatant  waste  of  resources  to  an  effective  Mi¬ 
crosoft  propaganda  campaign  against  network  com¬ 
puting.  I  drew  back  into  a  state  of  complacency  until 
people  started  speaking  positively  of  a  new  technolo¬ 
gy  trend  called  grid,  or  utility,  computing. 

By  itself,  grid  computing  makes  perfect 
sense.  But  when  I  heard  people  talk  about 
basing  their  computer  grids  on  desktop 
computers,  something  didn’t  seem  right. 

The  idea  is  to  be  able  to  add  and  redis¬ 
tribute  computing  resources  by  siphoning 
computing  power  from  hundreds  or  even 
thousands  of  unsuspecting  users.  I  know 
it’s  supposed  to  leverage  unused  CPU 
cycles,  but  I  couldn’t  help  but  think  of  it 
as  a  managed  distributed  denial-of-ser- 
vice  attack.  As  crazy  an  idea  as  it  was,  it 
wasn’t  quite  the  kind  of  insanity  usually 
produced  by  the  well-documented  mind- 


control  rays  that  emanate  from  Redmond. 

Then  I  suddenly  saw  the  connection.  Grid  comput¬ 
ing  is  a  logical  continuation  of  the  Bizarro  decision  to 
reject  network  computing.  “Me  waste  big  money  on 
thousands  of  PCs  with  super-duper  processors  and 
waste  more  money  managing  all  these  PCs.  What  me 
do  now?  Replace  PCs  with  network  computers,  sim¬ 
plify  management  and  stop  expensive  upgrade  cycle? 
No,  me  save  money  by  adding  new  complicated  soft¬ 
ware  to  PCs  to  off-load  server  processing  to  over¬ 
powered  desktops.  Me  have  more  software  to  man¬ 
age,  more  things  to  break  and  thousands  more  poten¬ 
tial  security  holes!” 

How  many  chief  technology  officers  had  fallen 
asleep  with  Bizarro  pods  under  their  beds?  And 
how  far  had  this  spread?  I  had  to  know.  Then  I  read 
a  review  of  Onset  Technology  Inc.’s  METAmessage 
( www.metamessage.com ).  Here,  at  last,  was  irrefutable 
proof  that  the  invasion  had  spread  even  to  vendors. 
Look  at  the  problem  METAmessage  addresses: 

People  often  want  to  share  information  by  sending 
e-mails  with  attached  spreadsheets  or  other  complex 
documents.  Unfortunately,  many  wireless  handheld 
devices  can’t  read  or  decode  these  attachments. 

There’s  no  reason  why  productivity  applications 
can’t  convert  and  mail  complex  documents  as  HTML. 
Some  already  do.  Make  it  company  policy,  and  the 
problem  is  solved.  The  folks  at  METAmessage,  how¬ 
ever,  said,  “Me  solve  problem  by  selling  $7,000  server 
and  extra  handheld  software.  User  clicks 
on  attachment,  handheld  e-mails  spread¬ 
sheet  to  server,  server  converts  spread¬ 
sheet  to  HTML  or  text,  and  e-mails  new 
message  back  to  handheld!  Me  customers 
save  money  by  paying  for  more  servers, 
software  and  wireless  traffic!  Users  save 
time  by  waiting  for  attachments  to  go  to 
the  server,  get  translated  and  returned  as 
HTML!” 

So,  listen  to  me  before  it’s  too  late! 
You’re  in  danger.  Can’t  you  see?  The 
Bizarro  pods  are  after  you.  They’re  after 
all  of  us.  You’re  next!  » 


NICHOLAS  PETRELEY 

is  a  computer  consultant  j 
in  Hayward,  Calif. 

He  can  be  reached  at 

nicholas@petreley.com 
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Overview: 

Voice  Over  IP 


■  Consolidates  the  voice/data  network 
infrastructure. 

■  Allows  easier  moves,  adds  and  changes. 


■  Can  consolidate  interoffice  voice  traffic 
onto  a  wide-area  network,  replacing  off 
premises  lines  and  tie  lines  provided  by 
telecommunications  companies. 

■  Allows  easier  integration  of  voice  for 
call  centers  and  other  applications. 


THE  BAD 


■  Installation  costs  are  the  same  or  more 
than  for  a  PBX. 

■  Systems  still  lack  many  features  found 
in  PBXs. 

■  Analog  integration  can  be  problematic. 

■  Consultants  with  the  required  voice  and 
data  experience  are  in  short  supply. 

■  Standards  for  powering  phones 
over  Ethernet,  such  as  call  control 
protocols,  are  still  evolving. 


DEPLOYMENT  TIPS 


■  Start  planning  now.  All  LAN/WAN 
upgrades  should  take  voice  into  account. 

■  Phase  it  in.  Starting  with  a  small 
branch-office  installation  allows  staff 
to  gradually  come  up  to  speed  on  IP 
telephony  technology. 

■  Hire  an  expert.  A  good  consultant  will 
have  experience  in  both  the  voice  and 
data  worlds. 

■  Check  your  infrastructure.  Older  LAN 
cabling  that  works  fine  for  data  may  fail 
for  voice  applications.  Wiring  closets 
may  require  extra  power  and  cooling. 

■  Be  sure  your  WAN  can  handle  it. 
Latency  and  bandwidth  considerations 
may  make  running  voice  over  the 
corporate  WAN  unworkable. 

■  Get  what  you  need.  Features  vary 
widely,  so  make  sure  the  ones  your 
users  need  are  supported. 


BEST  FIT  TODAY 


a  For  test  installations  in  branch  offices 
with  all-new  LAN  infrastructures  and 
for  installations  that  don’t  need  more 
sophisticated  PBX  features. 

*  As  a  replacement  for  Centrex  and 
smaller  key  systems. 

By  Robert  L.  Mitchell 


Crossing  the 
Voice/Data  Divide 


TECH 

CHECK 


TO  HEAR  VENDORS  TALK  ABOUT  IT, 
you’d  think  IP  telephony  in  the  enter¬ 
prise  was  a  tsunami  about  to  break 
across  corporate  America.  Indeed,  tra¬ 
ditional  private  branch  exchange 

(PBX)  vendors,  initially  caught  off  guard  by  IP  _ 

telephony  initiatives  launched  by  data  network¬ 
ing  companies  such  as  Cisco  Systems  Inc.  in 
the  late  1990s,  have  now  embraced  the  technol¬ 
ogy  as  a  way  to  boost  moribund  PBX  sales. 

But  make  no  mistake;  IP  telephony  is  still 
very  much  an  emerging  technology.  “We’re  slightly 
beyond  the  early-adopter  stage,  but  not  much  be¬ 
yond  that,”  says  Darrell  Epps,  a  manager  at  integrator 
NextiraOne  LLC  in  Houston.  The  truth  behind  the 
numbers  is  that  most  deployments  are  limited  to  so- 
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called  greenfield  installations  in  branch  offices 
where  IT  managers  can  safely  experiment.  And,  these 
early  users  say,  the  state  of  the  technology  and  the 
technical  implications  of  layering  voice  traffic  over 
existing  data  networks  necessitate  careful  planning. 

The  traditional  PBX  system  consists  of  a  circuit 
switch,  port  cards  that  connect  digital  and  analog 
telephones  with  interoffice  tie  lines  and  the  public 
switched  network,  and  call  processing  software.  IP 
telephony  breaks  this  apart. 

In  an  IP  telephony  configuration,  circuit  switching 
_  becomes  IP  packet  routing,  which  is  coordi¬ 
nated  by  a  call-processing  server  on  the  LAN. 
Voice  traffic  moves  through  the  data  network’s 
^Ethernet  switches  and  routers,  which  are  con¬ 
figured  to  give  voice  packets  priority.  IP  tele- 
phones  plug  into  the  IP  LAN  and  typically  in¬ 
clude  a  built-in  hub  for  sharing  the  desktop  comput¬ 
er’s  network  connection.  Finally,  gateways  to  external 
connections  may  be  embedded  in  routers  or  function 
as  stand-alone  network  devices. 

A  hybrid  configuration  can  extend  the  life  of  lega- 
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cy  PBXs  by  using  special  port  cards  to  allow  IP  phone 
connections.  However,  voice  traffic  remains  circuit- 
switched  on  the  back  end,  so  organizations  won’t  see 
the  full  benefits  of  a  converged  voice/data  network. 


IP’s  Advantages 

IP  telephony  technology  has  several 
advantages  over  PBXs.  Users  can  move 
their  IP  telephones  to  any  office  with  a 
LAN  jack  and  receive  their  calls  with¬ 
out  making  any  back-end  or  wiring 
closet  changes.  IT  can  build  and  main¬ 
tain  a  single  cable  system  where  two 
existed  before.  Management  and  sup¬ 
port  can  be  consolidated.  And  if  the 
corporate  WAN  can  support  voice  traf¬ 
fic,  interoffice  calls  can  be  routed  through  it,  replac¬ 
ing  expensive  tie  lines  (which  connect  PBXs)  and  off- 
premise  station  lines. 

But  most  users  say  the  real  benefits  will  come  as 
call  center  software  and  other  applications  evolve  to 
take  full  advantage  of  converged  voice,  data  and  video 


Of  210  Enterprises 
Surveyed . . . 


■  44%  of  enterprises  had 
begun  implementing  IP  LAN 
telephony  systems  in  2001. 

■  77%  will  have  done  so 
in  2002. 

Source:  InfoTech,  Parsippany, 

N.J.,  2001 
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services.  “It’s  a  good  thing  for  us  to  get  our  foot  in  the 
door,”  says  Ray  Cowley,  senior  vice  president  at  Key¬ 
Corp  in  Cleveland,  which  recently  installed  a  Cisco 
AWID  system  in  12  new  KeyBank  branch  offices. 

So,  what’s  missing?  IP  telephony  LANs  generally 
don’t  offer  the  same  range  of  advanced 
call-processing  features  as  traditional 
PBXs,  says  Karen  Simpson,  an  analyst 
at  Stamford,  Conn.-based  Gartner  Inc. 
Standards  are  also  lacking.  Most  ven¬ 
dors  still  push  proprietary  phones  that 
use  their  own  call  control  protocols, 
while  paying  lip  service  to  industry 
standards  such  as  H.323  and  the  Ses- 
sion  Initiation  Protocol. 

And  while  traditional  PBXs  power 
digital  phones  over  voice  circuits  and  can  provide  cen¬ 
tralized  backup  power  for  several  hours,  each  vendor 
uses  its  own  proprietary  technology  to  do  so  across 
the  IP  LAN.  Standards  are  evolving,  but  the  current 
lack  of  interoperability  locks  users  into  buying  all  core 
components,  from  IP  phones  to  gateways  to  call  pro¬ 
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cessing  servers,  from  a  single  vendor  or  its  licensees. 

Users  have  also  faced  installation  issues,  particu¬ 
larly  in  connecting  with  the  analog  world.  “We  had  a 
lot  of  gyrations  to  get  analog  circuits  and  fax  ma¬ 
chines  to  work,”  says  Cowley. 

Despite  these  issues,  users  are  generally  bullish  on 
IP  telephony.  “You’ve  got  to  get  out  there  and  get 
your  teams  exposed  to  this,”  Cowley  says. 

Eventually,  analysts  say,  IP  telephony  will  be  just  an¬ 
other  set  of  applications  running  over  the  enterprise 
network.  But  today,  notes  Cowley,  “there’s  a  lot  of 
tweaking  to  try  to  work  through  some  of  the  issues.”  > 

BRANCH-OFFICE  BOTTLENECK? 

KeyCorp  decided  to  bank  on  IP  telephony  and  had  to  implement  it  for  900 
branch  offices.  Check  out  this  deployment  snapshot.  QuickLink:  29563 

Get  up  to  speed  quickly  with  this  listing  of  links  to  informative  sites, 
plus  a  rundown  on  IP  telephony  vendors.  QuickLink:  29565 

Need  a  consultant?  Finding  the  right  one  may  be  critical  -  and  difficult. 
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QuickLink:  29561 
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Short-term  Pain,  Long-term  Gain 


SNAPSHOT 

Embarcadero 
Systems  Corp. 

Alameda,  Calif. 


■  Who  they  are:  A  provider  of  shipping 
terminal  management  services  and  cargo 
management  systems 

■  IT  goal:  Replace  aging  Nortel  Networks 
Ltd.  Meridian  private  branch  exchanges 

(PBX)  in  20  locations  with  an  IP  telephony  system  running  over  a 
Cisco  Systems  Inc.  network  infrastructure.  Replace  the  Nortel  auto¬ 
matic  call  distribution  (ACD)  center  with  an  IP-based  application. 

■  Strategy:  Implement  Cisco-based  IP  telephony  and  ACD  software 
that  works  with  the  recently  upgraded  data  network  infrastructure. 

■  Challenges:  Cisco  is  still  learning  telephony,  and  it  shows,  says 
John  Montgomery,  chief  technology  officer  at  Embarcadero.  "We 
ran  into  some  technical  issues  trying  to  duplicate  some  very  simple 
[PBX]  features,  and  it  stemmed  from  [Cisco’s]  lack  of  knowledge  in 
that  area,”  he  says.  That  created  disruptions  for  end  users,  who  are 
now  wary  of  the  technology.  “There  were  a  lot  more  hidden  costs, 
and  [end-user]  pain  is  one  of  those,”  Montgomery  says. 

Finding  knowledgeable  help  to  deploy  the  system  was  also  a  prob¬ 
lem.  When  Montgomery  hired  a  Cisco-recommended  integrator,  the 
firm  had  insufficient  experience  to  deal  with  the  deployment  issues. 
“They  took  off  in  the  middle  of  the  implementation  and  left  us  high 
and  dry,”  he  says.  His  advice  to  others  considering  voice  over  IP: 
“Make  sure  you  have  a  very  experienced  third  party  to  implement  it.” 
Legacy  terminals  were  another  problem.  The  company’s  HP  3000 


uses  a  proprietary  protocol  that  requires  special  routing.  Cisco 
switches  couldn’t  support  IP  voice  and  data  packets  and  the  terminal 
protocol  at  the  same  time.  “When  you  have  older  technology,  it’s  tough 
to  make  sure  all  the  old  stuff  works,”  Montgomery  says. 

■  Results:  Montgomery  implemented  the  system  in  three  new  loca¬ 
tions  and  has  partially  implemented  the  system  in  the  firm’s  data  cen¬ 
ter.  One  of  two  call  centers  is  also  online,  but  he  has  decided  not  to 
proceed  further  at  this  time.  “It  works,  but  it’s  really  complicated  to 
implement,”  he  says. 

■  Benefits:  “The  short-term  investment  is  not  as  rewarding  as  we 
expected,”  says  Montgomery,  who  sees  IP  telephony’s  benefits  as 
more  of  a  long-term  proposition.  “The  value  has  diminished  some¬ 
what,  given  that  we’re  not  deploying  it  everywhere,  but  eventually  it 
will  add  value.”  Montgomery  says  the  alternative  -  investing  in  a  new 
digital  PBX  -  makes  little  sense.  “I  don’t  think  companies  have  a 
choice  but  to  go  in  this  direction,”  he  says. 

■  Comments:  “Don’t  let  future  capabilities  overshadow  your  ROI 
concerns,  or  you  may  be  disappointed,"  warns  Montgomery.  “I'm 
telling  you  that  we  made  a  mistake.  If  I  could  do  it  over,  I  would  focus 
on  the  fundamentals  and  make  sure  they  worked."  Still,  he  says  IP 
telephony  is  the  right  way  to  go:  he  just  moved  too  quickly.  “I  think 
maybe  we  were  more  on  the  bleeding  edge,”  Montgomery  says,  “and 
I  don’t  like  being  there."  His  advice:  Wait  six  months  to  a  year  “so  that 
the  technology  can  catch  up.” 


Phasing  In  IP  Telephony 


SNAPSHOT 

Datek  Online 
Holdings  Corp. 

Jersey  City,  N.J. 


■  Who  they  are:  An  online  financial 
services  vendor 

■  IT  goal:  Create  a  unified  network  in¬ 
frastructure  in  a  new  building  with  IP 
telephony  support  for  1,000  users. 

■  Strategy:  Replace  Nortel  Networks  Ltd.  PBXs  with  Cisco 
Systems  Inc.’s  AWID  IP  telephony  system  and  voice  mail  serv¬ 
er.  Implement  fully  redundant  call  processing  servers,  voice 
mail  servers  and  gateways.  Configure  virtual  LANs  to  separate 
voice  and  data  traffic. 

■  Challenges:  “We’ve  been  pretty  fortunate  in  that  we 
haven’t  had  any  major  issues,”  says  chief  network  architect 
Rolando  Garcia. 

■  Results:  Seven  hundred  employees  have  been  using  IP 
phones  at  headquarters  for  about  one  year,  but  Garcia  left  the 
call  center  running  off  the  legacy  PBX.  He  says  he’s  hoping  to 
get  the  call  center  on  the  IP  network  by  midsummer. 

■  Benefits:  “You  don’t  need  a  huge  room  for  telephony  equip¬ 
ment,”  Garcia  says.  “This  all  fits  into  one  rack  vs.  half  a  room  for 
Nortel,  [and]  you  can  leverage  the  open  architecture.” 

■  Comments:  “First  and  foremost,  you  need  a  sturdy  net¬ 
work,"  advises  Garcia.  "If  it’s  not  stable,  you’ll  see  it  right  away 
with  latency  and  jitter.  Secondly,  go  in  a  phased  approach.  Try 
not  to  do  the  whole  company  in  one  shot." 


Field  Report  continues  on  page  52 
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Talking  in  Packets 
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Culture  Clash 

When  voice  and  data  technologies  converge, 
the  groups  that  support  them  often  do  as  well. 
For  both  sides,  the  process  can  be  a  culture 
shock,  IT  managers  say.  The  data  side  needs 
to  learn  analog  circuits,  telephones  and  voice  mail,  while 
voice  technicians  must  understand  data  networking  and  rout¬ 
ing  technologies. 

Technicians  must  also  understand  the  implications  of  a  con¬ 
verged  network,  says  analyst  Karen  Simpson  at  Stamford, 
Conn.-based  Gartner  Inc.,  citing  one  client’s  experience. 

“One  technician  decided  to  take  a  server  down  at  10  in  the 
morning  to  do  some  network  changes,  and  he  brought  the 
whole  voice  and  data  network  down.  He  put  in  the  wrong 
routing,  and  they  were  out  of  phones  for  four  hours,”  she  says. 

Bill  Miller,  desktop  services  manager  for  Nevada  County, 
Calif.,  merged  his  own  telecommunications  and  support  staffs 
and  says,  “The  learning  curve  for  the  traditional  desktop-support 
person  to  go  to  the  telephony  side  is  very  minimal.  It’s  more  diffi¬ 
cult  for  the  voice  side  to  go  over  to  the  data,  because  they’re  not 
in  tune  with  the  routers,  gateways  and  edge  LAN  equipment.” 

“The  staff  that  has  more  voice  experience  is  still  the  weak¬ 
er  of  my  network  analysts,”  says  John  Montgomery,  chief 
technology  officer  at  Alameda,  Calif.-based  Embarcadero 
Systems  Corp.  He  adds  that  some  problems  that  voice  tech¬ 
nicians  used  to  address  now  must  be  handled  on  his  AVVID 
system  by  more  expensive  network  engineers. 

Nevada  County  CIO  Steve  Monahan  says  cross-training 
actually  makes  it  easier  to  retain  telecommunications  support 
staff.  “We  had  problems  getting  new  young  talent  to  work  on 
telecom  -  they  all  want  to  be  computer  guys,”  he  says.  “Now 
they’re  jazzed.” 

And  once  technicians  are  trained,  end  users  are  the  winners, 
says  Miller.  “Our  network  and  PC  guys  are  now  phone  guys,” 
he  says.  "We  just  increased  the  level  of  support  staff  that  can 
support  our  clients  with  the  new  phone  system.” 


Implementation  Plans 

Ninety-two  of  210  enterprises  surveyed  said  they  had  begun 
implementing  IP  telephony  systems.  Decision-makers  at  those 
92  companies  rated  60%  of  the  offices  associated  with  their 
enterprises  as  “very  likely"  or  “somewhat  likely”  to  implement 
IP  LAN  telephony  by  2005. 


Base:  210  U.S.  businesses  with  between  500  and  200.000  employees 

SOURCE.  INFOTECH.  PARSIPPANY.  N.J.,  2001 


Voice,  Data 
Vendors  Face  Off 

Your  data  network  infrastructure  is  a  Cisco  shop;  your  telephony 
group  swears  by  Nortel.  Which  vendor  should  supply  your  IP  tele¬ 
phony  system?  While  Cisco  and  3Com  both  came  to  market  early 
with  IP  telephony  systems,  the  traditional  vendors  are  hitting  back 
with  their  own  offerings.  Here’s  a  look  at  the  trade-offs. 

The  Data  Route 

Cisco  Systems  Inc.  and  Santa  Clara,  Calif. -based  3Com  Corp.  lead 
the  market  for  midsize  and  large  IP  telephony  sys¬ 
tems.  Cisco’s  AVVID  architecture  takes  a  modular, 
open  approach:  Gateway  devices  plug  into  its 
routers,  and  its  CallManager  and  Unity  voice  mail  software  run  on 
separate  Windows  servers.  3Com’s  NBX  systems  bundle  every¬ 
thing  together:  The  voice  mail,  call  management  and  gateway  in¬ 
terface  cards  come  in  a  single  server  chassis  running  VxWorks,  a 
real-time  operating  system  based  on  Unix. 

Both  systems  work  optimally  in  organizations  that  have  already 
invested  in  the  vendors’  switches  and  routers.  However,  several 
users  reported  difficulties  getting  analog  connections  to  work 
properly  and  cited  a  lack  of  vendor  experience  in  dealing  with  the 


problems.  And  both  vendors  lag  behind  traditional  private  branch 
exchanges  (PBX)  in  terms  of  available  call-processing  features. 

“Cisco  is  not  close  to  what  a  Nortel  or  Avaya  can  offer,”  says 
Karen  Simpson,  an  analyst  at  Stamford,  Conn.-based  Gartner  Inc. 
Darrell  Epps,  a  manager  at  NextiraOne  LLC  in  Houston,  concurs 
but  says,  “The  vast  majority  of  [our]  customers  are  not  using 
those  features  anyway.”  Bottom  line:  List  all  the  features  you 
need  in  the  request  for  proposals  and  make  sure  the  product  can 
support  them  without  customization. 

The  Voice  Circuit 

The  leaders  on  the  voice  side  include  Nortel  Networks  Ltd.,  Avaya 
Inc.  and  Siemens  Enterprise  Networks  USA.  All  three 
offer  hybrid  systems,  and  some  vendors  have  rolled 
out  native  IP  systems  as  well.  Basking  Ridge,  N.J.- 
based  Avaya,  for  example,  claims  to  have  migrated  the  entire  feature 
set  of  its  Definity  PBX  systems  into  its  ECLIPS  IP  telephony  offering 
and  says  the  system  can  interoperate  with  legacy  Definity  systems. 

In  addition  to  a  broader  feature  set,  traditional  PBX  vendors  can 
offer  a  consistent  migration  path.  You  don’t  have  to  retrain  end  users, 
says  Epps,  but  getting  the  systems  to  work  with  existing  switches 
isn’t  as  easy.  For  example,  “the  quality  of  service  implementations 
done  by  Nortel  are  not  entirely  in  keeping  with  those  done  by  Cis¬ 
co,”  and  that  can  cause  interoperability  problems,  he  says. 
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One  County’s 
Trial  by  Fire 

Nevada  County,  Calif.,  was  already  planning  to 
cut  over  to  a  new  IP  telephony  system  when  a 
March  19  fire  destroyed  a  building  in  Nevada  City 
that  housed  the  county’s  Siemens  Saturn  private 
branch  exchange  (PBX). 

Before  the  fire  was  out,  Bill  Miller,  desktop  services  manager, 
says  his  group  had  relocated  the  building’s  120  employees  and 
set  them  up  with  IP  phones  with  access  to  their  tele¬ 
phone  extensions  and  voice  mail  on  a  3Com  NBX  100 
communications  server.  Miller’s  experience  demon¬ 
strates  one  benefit  of  IP  telephony  systems:  the  ability 
for  users  to  relocate  their  offices  and  have  immediate 
and  full  access  to  their  telephone  services  simply  by 
plugging  their  IP  phones  into  the  nearest  network 
connection.  “That  gives  us  credibility,  being  able  to 
do  that  in  crisis  mode  and  being  able  to  set  up  a  triage 
operation,”  says  Miller. 

But  what  appeared  to  end  users  as  a  quick  and 
easy  transition  was  actually  the  culmination  of  a  long 
and  often  painful  learning  process,  Miller  says. 

Two  factors  started  the  county  down  the  voice- 
over-IP  road.  First,  Reston,  Va.-based  Siemens  Enterprise  Net¬ 
works  USA  dropped  maintenance  on  the  circa  1987  Siemens  Sat¬ 
urn  PBX  that  served  more  than  700  users.  But  Miller  also  saw  IP 
telephony  as  enabling  technology  for  his  application  infrastructure. 
“We  have  the  interactive  voice  response,  the  phone  system,  the 
Web,  e-mail,  and  we  wanted  to  lay  down  the  foundation  for  them 
to  work  together,”  he  says. 


IP  TELEPHONY 

projects  are  “not  for 
the  faint  hearted,” 
warns  Bill  Miller. 


That  foundation  didn’t  set  quickly  or  easily,  however.  Miller 
says  he  chose  products  from  Santa  Clara,  Calif.-based  3Com 
Corp.  because  his  data  network  is  built  on  the  vendor’s  gear.  He 
chose  the  county  courthouse  for  the  first  installation  and  put  in 
all-new  SuperStack  3300  Ethernet  switches  and  a  fiber  backbone. 

“That’s  when  the  fun  started,”  Miller  says.  First,  he  had  trouble 
getting  the  NBX  server  in  the  courthouse  to  pass  calls  through  a  T1 
line  to  another  NBX  in  the  data  center  and  out  to  trunk  lines.  Also, 
integration  problems  prevented  users  on  the  3Com  system  from 
using  four-digit  dialing  to  call  other  users  on  the  Siemens  PBX. 

“Then  we  started  to  get  performance  problems,”  Miller  says. 
The  older,  Category  3  wiring,  which  worked  fine  for 
data,  was  a  disaster  for  voice.  “If  you  had  one  or  two 
workstations  with  bad  wiring,  it  would  affect  that 
closet,”  Miller  says.  The  result  was  oscillating  volume, 
dropped  calls  and  echoes.  It  took  six  months  to  clean 
up  the  problems  and  resolve  the  trunk-line  issues. 

One  problem  remains  unresolved.  The  old  system 
was  programmed  to  route  callers  to  a  specific  atten¬ 
dant  for  their  group.  With  the  3Com  system,  “if  you 
press  zero,  it  can  only  go  to  one  attendant  organiza¬ 
tionwide.”  To  get  around  that,  Miller  has  had  to  train 
users  to  dial  zero  plus  a  four-digit  extension.  “I’m 
having  to  do  a  public  relations  thing  to  explain  how 
you  operate  voice  mail,”  he  laments. 

With  most  of  these  problems  behind  him,  Miller,  who  is  now 
switching  over  the  bulk  of  the  county’s  users,  is  still  optimistic 
about  IP  telephony.  “I  just  halved  the  cost  of  my  [wiring]  closets,” 
he  says.  Miller  also  cites  a  drop  in  hardware  maintenance  costs, 
as  well  as  a  reduction  in  power,  air  conditioning  and  floor-space 
requirements  in  the  data  center.  But,  he  acknowledges,  “it’s  not 
for  the  fainthearted." 
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Anti-aliasing 

DEFINITION 

Anti-aliasing  is  the  mathematical  antidote  to  aliasing, 
the  jagged  or  stair-stepped  look  of  diagonal  or 
curved  lines  in  computer  graphics.  An  anti-aliasing 
algorithm,  applied  to  a  bitmapped  image  or  type, 
evaluates  the  tone  and  color  of  pixels  at  the  image 
edge  and  shades  or  offsets  adjoining  pixels  to  present 
to  the  eye  a  smoother,  softer  line. 


BY  SAMI  LAIS 

NTI-ALIASING 
smooths  the  raw 
and  haggard 
edges  on  digital 
type  and  images 
on  computer  and  handheld 
displays,  wireless  phones, 
printers,  even  digital  cameras. 

Aliasing  —  jagged  or  stair- 
stepped  edges  —  appears 
when  there  are  too  few  pixels 
in  an  image  or  on  a  display  to 
represent  it  realistically. 

Spectral  aliasing  —  moire  or 
herringbone  patterns  where 
none  should  be  —  appears  as  a 
result  of  interference  between 
digital  signals,  such  as  color 
and  brightness. 

How  It  Works 

In  graphics  or  type,  anti¬ 
aliasing  algorithms  sample, 
or  examine  and  evaluate,  the 
colors  and  shades  of  pixels 
adjoining  curved  or  di¬ 
agonal  lines.  They  also 
shade  some  pixels  to 
create  a  softer  line.  The 
eye  no  longer  clearly 
sees  the  stair-stepped 
edge  and,  paradoxically,  it 
reads  the  softer  line  as  clearer. 

Some  anti-aliasing  algo¬ 
rithms  create  a  similar  effect 
by  jittering.  Instead  of  chang¬ 
ing  a  pixel’s  color  or  tone,  the 
filter  slightly  offsets,  or  jitters, 
the  pixel  by  a  random  amount 
from  its  normal  placement. 
This  creates  a  more  gradual 
transition  between  an  object 
and  its  background. 

Dithering,  or  creating  a  sim¬ 


ilar  shaded  effect  using  pat¬ 
terns  of  dots  of  colors,  can 
create  an  anti-aliasing  effect 
for  photographs  and  shaded 
drawings. 

Increasing  the  resolution 
and  thus  reducing  the  pixel 
size  can  create  an  effect  similar 
to  that  of  anti-aliasing,  but  this 
may  not  always  be  feasible. 

Fractal  compression 
lets  you  store  thousands 
of  large  image  files  on  a 
single  CD. 

Fractal  compression 
works  by  reducing  each 
shape  or  pattern  to  an  equa¬ 
tion.  When  the  fractal  image 
is  reconstructed,  there’s  often 
more  information  than  the 
display  can  show,  and  artifacts 
—  bits  of  white  debris  —  are 
created.  Anti-aliasing  elimi¬ 
nates  these  artifacts  and  cre¬ 
ates  smoother  edges. 

High-end  graphics  hardware 
maker  Silicon  Graphics  Inc.  in 
Mountain  View,  Calif.,  devel¬ 
oped  an  anti-aliasing  method 


that  uses  special  accumulation 
buffers  that  temporarily  store 
rendered  frames.  When  sever¬ 
al  frames  have  accumulated, 
the  graphics  chip  blends  them 
together. 

To  counter  aliasing,  some 
devices,  such  as  Intel  Corp.’s 
Pentium  III  chip  and  many 
printers  and  digital  cameras, 
incorporate  anti-aliasing  fil¬ 
ters.  High-end  graphics  cards 
may  contain  more  sophisticat¬ 
ed  anti-aliasing  filters. 

Most  anti-aliasing  filters 
sample  adjoining  pixels  be¬ 
tween  two  and  16  times  at  dif¬ 
ferent  locations,  then  combine 
and  average  the  different  read¬ 
ings  to  get  the  most  realistic 
color.  More  samples  result  in 
subtler  gradations  between 
image  edges  and  along  curved 
or  diagonal  lines  and  type. 

But  a  higher  sample  rate  takes 
more  time  and  memory. 

Some  cards  use  supersam¬ 
pling,  which  renders  the  im¬ 
age  at  a  resolution  higher  than 


the  display  can  support  and 
then  scales  down  and  filters 
the  image  —  in  effect,  adding 
new  pixels,  before  sending  it 
to  the  display.  But  such  brute- 
force  techniques  take  a  toll  on 
performance. 

Trade-offs 

Some  graphics  cards  makers 
use  anti-aliasing  filters  with 
distinctive  sampling  patterns 
that  create  a  high-sample  effect 
with  a  modest  sampling  rate. 

The  GeForce4  Ti  4600 
graphics  card  from  Nvidia 
Corp.  in  Santa  Clara,  Calif., 
uses  a  multisampling  tech¬ 
nique,  which  embeds  the  anti¬ 
aliasing  in  hardware.  The  per¬ 
formance  decline  is  much  less 
with  this  technique,  Nvidia 
says,  because  some  of  the 
samples  on  which  it  bases  the 
anti-aliasing  are  virtual  rather 
than  actual  pixels. 

Edge  anti-aliasing,  such  as  in 
San  Jose-based  Adobe  Systems 
Inc.’s  Photoshop  software, 


doesn’t  anti-alias  an  entire 
photograph  or  drawing,  but 
only  where  an  object  of  one 
color  and  tone  meets  another 
such  object  or  the  background. 

Experienced  users  can  take 
advantage  of  Photoshop’s 
sharpen  and  blur  tools  to  sim¬ 
ulate  the  anti-aliasing  effect. 

Visual  disruption  caused  by 
aliasing  is  even  more  obvious 
with  video.  As  stills,  each 
frame  may  look  fine.  But  as  a 
video  image,  artifacts  could 
make  the  edge  of  a  building 
appear  to  crawl  or  twinkle. 
Anti-aliasing  can  eliminate 
most  of  these  problems. 

But  while  anti-aliasing  an 
image  may  smooth  edges  to 
give  it  a  less  harsh  appearance, 
photographers  may  prefer  the 
sharper  image. 

As  with  photographic  detail, 
type  smaller  than  14  pixels 
high  (about  one-seventh  of  an 
inch  on  a  normal  display 
screen)  doesn’t  benefit  from 
anti-aliasing  fuzzy  edges. 

Generally,  anti-aliasing 
helps  with  display  type,  logos, 
graphics  and  some  photo¬ 
graphs,  but  it  doesn’t  help 
text-size  type  or  when  maxi¬ 
mum  sharpness  and  detail 
is  needed.  I 


Lais  is  a  freelance  writer  in 
Takoma  Park,  Md. 
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Fractal  compression  lets  you  store  thousands  of  high-resolution  images  on 
a  single  CD,  but  decompressing  them  can  cause  artifacts,  as  shown  in  the 
image  on  the  left.  Anti-aliasing  removes  the  artifacts,  as  shown  on  right. 


Imagine  that  each  square  in  the  grid  is  a  pixel.  If  you  were  to 
draw  a  diagonal  line,  it  wouldn’t  look  like  the  line  on  the  left 
but  rather  like  the  one  in  the  middle.  To  disguise  the  jagged 
look,  anti-aliasing  samples  pixels  at  the  edge  and  creates  new 
shaded  pixels  that  blur  the  jagged  line.  If  you  squint,  you’ll  see 
the  line  at  the  right  looks  straighter  than  the  line  in  the  middle. 
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The  letters  on  the  top 
look  ragged.  By  adding 
pixels  to  curved  and 
diagonal  lines  in  type, 
anti-aliasing  makes 
the  letters  on  the  bot¬ 
tom  look  smoother 
and  more  legible.  This 
effect  works  best  on 
type  that’s  more  than 
14  pixels  high. 
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XML’s 

Dirty  Secret 


As  B2B  em¬ 
braces  XML, 
the  technology 
can  inadvertently 
expose  sensi¬ 
tive  data. 

By  Russell  Kay 


The  information 
security  crowd 
has  a  serious 
problem.  These 
folks  think  that 

what  they’re  doing  to  safeguard 
data  still  works.  Sure,  they  did 
good  work  keeping  secrets  and 
ensuring  data  availability  and 
integrity  when  most  comput¬ 
ing  was  mainframe-based  as 
well  as  during  the  client/server 
boom  of  the  ’90s.  And  they 
even  made  electronic  data 
interchange  safe. 

But  in  the  age  of 
Java  and  .Net,  where 
most  business-to- 
business  data  will  be 
represented  in  XML, 
things  are  very  different. 

Yes,  virtual  private  net¬ 
works  (VPN)  and  end-to-end 
encryption  using  public-key 
infrastructure  technology  can 
keep  data  confidential  while 
it’s  in  transit.  Protecting  data 
at  the  network  level  is  fine, 
until  someone  hacks  into  your 
system  and  goes  fishing  for  it. 


But  the  real  vulnerability  is 
XML  itself. 

The  trouble  with  XML  is 
that  it  explains  far  too  much 
about  the  data  that’s  repre¬ 
sented  in  it.  The  tags  that  de¬ 
fine  the  structure  of  a  docu¬ 
ment  and  describe  what  each 
individual  data  element  is  also 
make  it  dead  easy  to  locate 
sensitive  data,  such  as  credit 
card  and  transaction  informa¬ 
tion.  This  is  simultaneously 
the  basis  of  XML’s  power  and 
its  greatest  weakness. 

The  metadata  of 
the  tags  simplifies 
programming  and  fa¬ 
cilitates  interoper¬ 
ability.  But  it  also 
helps  point  out  to  interlopers 
—  whether  inside  dr  outside 
the  organization  —  where  the 
important  stuff  is.  Using  XML 
for  sensitive  or  mission-critical 
traffic  is  like  painting  a  target 
on  the  data.  Not  only  is  the  data 
exposed  and  wide  open,  but  it 
also  calls  attention  to  itself. 

Application  programmers 
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know  this.  System  designers 
know  this.  And  if  they  think 
about  it,  IT  managers,  too, 
realize  the  vulnerability.  But 
according  to  Weston  Swenson, 
president  of  Wellesley,  Mass.- 
based  Forum  Systems  Inc. 
(www.forumsys.com),  the  IT 
security  establishment  seems 
to  think  that  using  Secure 
Sockets  Layer  encryption  or 
a  VPN  to  protect  data  being 
transmitted  is  all  they  need  to 
do.  If  that’s  what  they  think, 
then  they’re  a  few  years  be¬ 
hind  the  curve,  says  Swenson, 
whose  company’s  product  ad¬ 
dresses  XML  security  directly. 
Forum’s  product  seems  like  a 
good  answer  to  a  question  IT 
managers  and  CIOs  should  be 
asking  themselves. 

Forum’s  Sentry  Server  Ap¬ 
pliance  is  an  encryption  engine 
targeted  directly  at  XML  data 
going  to  or  from  an  applica¬ 
tion.  It  takes  a  data  stream  and 
selectively  encrypts  specific 
data,  and  even  data  tags,  so  it 
can  hide  the  data  description. 
Someone  who’s  looking  for 
credit  card  tags  using  a  search 
string  —  <cre,  for  example  — 
won’t  find  them  if  the  tags 
themselves  have  been  encrypt¬ 
ed.  All  that  appears  is  <cy pher- 
tag>,  which  could  be  anything. 
And  multiple  cyphertags  need 
not,  of  course,  all  represent  the 
same  data  type. 

The  product  is  quite  simple: 
It’s  basically  a  Linux  box  with 
Forum’s  proprietary  software. 
Using  the  built-in  workbench, 


1h  nmintinfr  AZA/TT  With  Sentry  Server  Appliance,  a  data 

JUllA^i  V  V)  Llll^  VvlVxJ-^  stream  is  processed  to  encrypt  outgoing  XML 
traffic  and  decrypt  incoming  data.  The  dedicated  crypto  box  and  selective  encryption  of 
just  specified  fields  and  tags  keeps  overhead  to  a  minimum. 


Content-level 

switch 


Firewall 


Router 


Internet 


i 


you  can  examine  the  XML 
structure  of  a  typical  transac¬ 
tion  and  set  encryption  policy 
for  whichever  data  elements 
and  tags  you  wish.  The  en¬ 
cryption  uses  Triple  Data  En¬ 
cryption  Standard,  with  RSA 
for  key  management,  so  that’s 
not  a  weak  point.  Because  the 
product  encrypts  only  what 
you  tell  it  to,  it  can  process 
data  very  quickly. 

And  there’s  more.  The  box 
can  digitally  sign  data,  ensure 
nonrepudiation  and  issue  cer¬ 
tificates.  Since  it’s  a  dedicated 
device  that  handles  just  a  char¬ 
acter  stream  as  both  input  and 
output,  it  really  doesn’t  care 
what  kind  of  hardware,  soft¬ 
ware  or  operating  system  the 
rest  of  your  systems  use. 

Raising  Awareness 

I  worked  in  the  computer 
security  industry  for  a  dozen 
years,  during  a  time  when  the 
major  problems  involved  nei¬ 
ther  secrecy  nor  availability. 
The  trouble  spots  were  aware¬ 
ness  (getting  users  to  recog¬ 
nize  the  need  for  security)  and 
integrity  (making  sure  data 
wasn’t  corrupted,  usually  be¬ 
cause  of  errors  and  omissions). 

Security  awareness  today  is 
higher  than  it’s  ever  been,  and 
we’ve  got  lots  more  tools  to  en¬ 
sure  data  integrity  and  protect 
against  viruses.  We  have  indus¬ 
trial-strength  encryption  that’s 
almost  certainly  unbreakable 
for  at  least  the  next  decade. 

But  the  very  strength  of  our 
encryption  capabilities  can  mis¬ 
lead  us  into  a  very  false  sense  of 
security.  Yes,  we  have  the  abil¬ 
ity  to  encrypt  our  data  so  it’s 
unreadable.  But  do  we  actually 
do  it?  And  do  we  encrypt  the 
right  stuff  at  the  right  time? 

We  expend  a  lot  of  effort  to 
protect  data  so  we  can  com¬ 
municate  it  easily  and  cheaply 
over  the  Internet.  But  once  it 
arrives  at  its  destination,  it’s 
decrypted  and  stored  in  our 
databases,  and  the  only  re¬ 
maining  security  is  whatever 
firewalls  and  authentication 
systems  are  in  place.  And  we 
know  that  those  can  be  and 
are  being  hacked  every  day. 

XML  is  one  of  the  most 
powerful  ideas  to  engage  mod¬ 
ern  e-commerce.  Let’s  make 
sure  it  works  for  good,  t 
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CRYPTOGRAPHY  expert 
Martin  Heilman,  co¬ 
inventor  of  Diffie- 
Hellman  public-key 
encryption,  says  he  never  en¬ 
crypts  his  e-mail.  It’s  just  too 
much  trouble. 

“There’s  a  lack  of  integrat¬ 
ed,  automatic,  trans¬ 
parent  crypto,”  says 
Heilman,  professor 
emeritus  of  electrical 
engineering  at  Stan¬ 
ford  University.  “If  se¬ 
curity  is  an  add-on  that  people 
have  to  do  something  special 
to  get,  then  most  of  the  time 
they  will  not  get  it.” 

But  there  are  developments 
afoot  that  during  the  next  five 
years  may  bring  some  of  the 
integration,  automation  and 


transparency  Heilman  is  look¬ 
ing  for. 

“Cryptographic  operations 
will  disappear  into  the  infra¬ 
structure,”  predicts  Tom 
Berson,  a  principal  scientist  at 
Palo  Alto  Research  Center  Inc. 
(PARC)  in  California.  “The 

complexities  of  cryp¬ 
tography  and  of  cryp¬ 
tographic  key  manage¬ 
ment  will  be  hidden 
from  users.” 
Encryption  will  be 
seamlessly  integrated  into  vir¬ 
tually  every  computing  device 
and  piece  of  communications 
software,  Berson  says. 

And  it  will  happen  not  a 
moment  too  soon.  Increased 
connectivity  in  general  and 
the  rapid  rise  in  wireless  com¬ 


munications  in  particular  are 
leaving  users  with  files,  mes¬ 
sages  and  telephone  conversa¬ 
tions  vulnerable  to  loss  of  pri¬ 
vacy  and  confidentiality. 

PARC  researchers  have  sev¬ 
eral  projects  under  way  to  en¬ 
courage  the  use  of  encryption. 
One,  called  Quicksilver,  is  a 
program  aimed  at  convincing 
vendors  and  users  that  cryp¬ 
tography  is  no  longer  slow  and 
difficult  to  use.  In  its  Quicksil¬ 
ver  Manifesto,  PARC  exhorts 
users  to  “demand  that  your  in¬ 
terests  take  priority  over  ob¬ 
solete  beliefs  about  what  can 
and  cannot  be  done  to  secure 
your  information.” 

PARC  is  also  working  on 
making  encryption  more  user- 
friendly.  For  example,  it  has 


FUTURE 

WATCH® 


Cryptography 
For  the  Masses 

Encryption  will  be  everywhere,  and 
easier  to  use.  By  Gary  H.  Anthes 


proposed  an  intuitive  scheme 
for  user  authentication  in  ad 
hoc  wireless  networks.  The 
scheme  uses  public-key  cryp¬ 
tography,  but  without  a  public- 
key  infrastructure  (PKI)  that 
requires  users  to  have  digital 
certificates  signed  by  a  trusted 
third  party. 

“The  problem  with  PKI  is 
the  I,  not  the  PK,”  says  PARC 
researcher  Diana  Smetters. 

Stanford  researcher  Dan 
Boneh  is  developing  a  public- 
key  system  based  on  Identity- 
Based  Encryption,  by  which 
users  can  use  their  e-mail 
addresses  as  their  public  keys. 
Recipients  of  e-mail  encrypt¬ 
ed  by  the  system  wouldn’t 
need  pre-established  keys  or 
certificates.  The  system  would 
also  allow  the  creation  of  mes¬ 
sages  that  can  be  read  only  at 
a  specified  future  time. 

And  Anna  Lysyanskaya,  a 
computer  science  graduate 
student  at  MIT,  is  working 
with  IBM  to  develop  privacy- 
oriented  “anonymous  creden¬ 
tials.”  For  example,  users 
could  sign  up  for  an  online 
service  without  divulging 
their  identities.  The  service 
provider  could  verify  that  a 
user  is  registered,  but  it 
couldn’t  track  his  activities 
and  track  them  back  to  him. 

Years  of  Development 

Encryption  is  based  on  com¬ 
plex  mathematics,  and  it  often 
takes  years  for  experts  to  sat¬ 
isfy  themselves  that  there  are 
no  serious  flaws  in  a  crypto¬ 
system.  For  example,  the  new 
federal  Advanced  Encryption 
Standard  (AES)  algorithm, 
which  is  replacing  the  old,  less 
secure  Data  Encryption  Stan¬ 
dard,  is  based  on  techniques 
developed  in  the  mid-1990s. 
But  the  U.S.  Department  of 
Defense  won’t  widely  deploy 
AES  cryptography  until  2007. 

“Within  three  years,  we’ll 
see  a  reasonable  deployment 
of  AES,”  including  in  Sun  Mi¬ 
crosystems  Inc.  products,  pre¬ 
dicts  Susan  Landau,  a  senior 
staff  engineer  at  Sun.  She  says 
that  Sun  is  also  likely  to  em¬ 
brace  Elliptic  Curve  Cryptog¬ 
raphy  (ECC),  a  public-key 
cryptography  created  in  1985. 

ECC  has  advantages  over 
the  more  widely  used  RSA  en- 


Crypto  Scenario 


■  Encryption  will  be  integrated, 
automatic  and  transparent. 

■  It  will  secure  every  computing 
and  communication  device. 

■  There  will  be  public-key  crypto¬ 
graphy  without  an  elaborate  infra¬ 
structure. 

■  The  powerful  new  AES  will  gain 
wide  acceptance. 

■  The  lightweight  but  powerful 
ECC  will  secure  wireless  and 
mobile  communications. 

cryption  scheme.  These  ad¬ 
vantages  principally  include 
shorter  key  lengths  and  faster 
performance  for  a  given  level 
of  security.  Landau  says  that 
may  make  it  the  cryptosystem 
of  choice  for  mobile  devices 
short  on  processing  power 
and  memory. 

“Pretty  much  all  of  the  new 
standards  coming  out  of 
places  like  the  [Internet  Engi¬ 
neering  Task  Force]  are  being 
written  to  support  ECC,” 
Smetters  says.  “You  will  start 
to  see  people  adopt  ECC  as  an 
option;  after  it’s  a  pretty  com¬ 
mon  option,  it  will  start  to  be¬ 
come  the  default.” 

Cryptosystems  based  on  ex¬ 
isting  algorithms  are  likely  to 
remain  in  use  for  many  years. 
They  can  be  strengthened 
against  brute-force  attacks 
launched  by  ever-faster  com¬ 
puters  by  increasing  the 
length  of  the  encryption  keys 
they  use.  But,  experts  say, 
there  is  a  threat  looming  for 
all  public-key  systems:  ultra¬ 
fast,  massively  parallel  quan¬ 
tum  computers.  Very  primi¬ 
tive  quantum  computers  have 
already  been  built  at  IBM. 

However,  Heilman  says  it’s 
likely  to  be  at  least  10  to  15 
years  before  quantum  comput¬ 
ers  can  be  scaled  up  to  crack 
modern  encryption  keys.  “So, 
while  prudence  dictates  that 
we  keep  our  eye  on  quantum 
computing,  there  is  no  imme¬ 
diate  threat,”  he  says.  > 


CRYPTOGRAPHY  CRITIQUE 

Read  Martin  Heilman's  views  about  current 
cryptography  practices  at  our  Web  site: 

QuickLink:  29732 
www.computerworld.com 
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Wireless  LAN  Install  Leaves 
Corporate  Net  Wide  Open 


After  a  test  install  allows  drive-by  hacking, 

Mathias  steps  in  with  a  layered  security  design 


BY  MATHIAS  THURMAN 

NO  MATTER  HOW  MUCH  de¬ 
tail  one  provides  to  upper 
management  regarding  a 
vulnerability  or  a  security 
issue,  sometimes  a  tech¬ 
nology  that  isn’t  in  the  company’s  best 
interests  is  approved. 

My  problems  started  when  an  execu¬ 
tive  within  the  company  proposed 
building  a  LAN  infrastructure  using  an 
802.11b  wireless  LAN.  By  his  figures, 
rolling  out  wireless  would  help  the 
company  avoid  more  than  $2  million  per 
year  in  lost  productivity.  I  have  a  hard 

time  believing  that  we  would  _ 

save  that  much,  and  I’ve  yet  to 
see  any  supporting  documen¬ 
tation.  Most  of  our  employees 
have  offices  or  cubicles  with 
wired  connections,  and  each 
conference  room  has  enough 
Ethernet  drops  so  that  anyone 
who  wants  to  connect  his  laptop  to  the 
corporate  network  can  do  so  easily. 

A  few  months  ago,  when  the  decision 
was  made  to  implement  a  wireless  net¬ 
work,  Windows  NT  administrators 
within  the  IT  department  did  the  initial 
implementation  on  our  development 
network.  They’re  very  good  adminis¬ 
trators,  but  they  knew  nothing  about 
wireless  technology  and  installed 
everything  using  the  default  settings. 
This  included  using  the  notoriously  in¬ 
secure  40-bit  Wired  Equivalent  Privacy 
(WEP)  protocol  encryption  and  the  de¬ 
fault  Service  Set  Identifier  (SSID) 
codes  that  identify  the  wireless  hubs  on 
the  network. 


SECURITY 
MANAGER’S 
JOURNAL a 


Weaknesses  Revealed 

Upon  reviewing  the  install,  my  team 
was  able  to  demonstrate  how  weakness¬ 
es  in  the  implementation  would  allow  a 
hacker  with  freely  downloadable  soft¬ 
ware  and  a  $100  wireless  LAN  card  to  sit 
outside  our  building  and  gather  infor¬ 
mation  that  would  then  let  him  gain  ac¬ 
cess  to  our  corporate  network.  We  posi¬ 
tioned  ourselves  on  the  street  in  front  of 
our  building  and  used  these  tools  to 
start  collecting  packets  and  crack  the 
WEP  algorithm.  I’m  not  a  cryptograph¬ 
er  and  don’t  know  the  details  of  WEP 


encryption.  But  by  using  these  tools, 
which  compiled  easily  on  our  Unix 
server,  I  was  able  to  collect  network 
packets  and  crack  the  WEP  key. 

After  I  demonstrated  this  to  our  CIO, 
he  trashed  the  wireless  project,  and  that 
appeared  to  be  the  end  of  it  —  until 
three  weeks  ago.  Suddenly,  the  execu¬ 
tive  staff  was  at  it  again,  deciding  that 
we  should  implement  a  wireless  LAN 
anyway.  We  were  being  forced  to  imple¬ 
ment  a  technology  that  has  a  history  of 
being  insecure.  Although  I  didn’t  think 
the  benefits  outweighed  the  security 
risks,  the  deployment  was  happening 
anyway.  So  we  had  to  make 
the  best  of  it. 

Fortunately,  I  was  able  to 
convince  management  that 
my  team  should  at  least  spec¬ 
ify  the  products  and  configu¬ 
ration  to  improve  security. 
After  reviewing  the  options, 
we  decided  to  require  Cisco  Systems 
Inc.’s  Aironet  access  points  and 
adapters,  which  include  enhanced  se¬ 
curity  features. 

Like  many  products,  Aironet  sup¬ 
ports  stronger,  128-bit  encryption.  But 
the  feature  that  attracted  us  was 
Aironet’s  Lightweight  Extensible  Au¬ 
thentication  Protocol  (LEAP).  With 
LEAP,  Cisco  decouples  authentication 
from  the  encryption  process  by  sup- 


Six-Step  Program  for 
Wireless  LAN  Security 


The  six  main  features  of  the  wireless 
LAN  security  strategy  at 
Mathias  Thurman’s  company: 

1.  Enable  128-bit  session  encryption. 

2.  Configure  RADIUS  server  authentication. 

3.  Force  30-minute  periodic  reauthentica¬ 
tion  for  all  users. 

4.  Require  use  of  VPN  to  access  critical 
resources. 

5.  Restrict  LAN  access  rights  by  role. 

6.  Implement  two-factor  authentication 
scheme  using  access  tokens  for  users 
accessing  critical  infrastructure. 


porting  the  use  of  an  external  Remote 
Authentication  Dial-In  User  Service 
(RADIUS)  server  to  authenticate  wire¬ 
less  LAN  users.  In  traditional  wireless 
systems,  anyone  with  the  proper  SSID 
and  password  (used  for  WEP  encryp¬ 
tion)  can  become  a  node  on  the  net¬ 
work.  With  LEAP,  even  if  someone 
were  to  compromise  the  SSID  and  the 
encryption  key,  he  would  still  need  an 
account  on  the  RADIUS  server  to  gain 
access  to  the  LAN. 

Aironet  also  lets  administrators  es¬ 
tablish  a  midsession  reauthentication 
policy.  We  plan  to  configure  this  feature 
so  that  users  are  forced  to  authenticate 
again  every  30  minutes.  This  type  of 
policy  disrupts  a  hacker’s  ability  to  in¬ 
tercept  packets  and  crack  the  session 
key,  which  could  be  used  to  gain  entry 
to  the  network. 

Tunnel  Security 

We  already  have  Cisco’s  Secure  Ac¬ 
cess  Control  Server  to  authenticate  our 
virtual  private  network  (VPN)  users, 
and  we’re  going  to  force  the  use  of  a 
VPN  tunnel  for  wireless  access  to  our 
corporate  infrastructure.  We’ll  use  our 
current  installation  of  VPN  concentra¬ 
tors  and  configure  them  so  that  only 
the  required  level  of  access  will  be  au¬ 
thorized  for  each  wireless  user.  For  ex¬ 
ample,  if  a  sales  employee  accesses  the 
network  wirelessly,  he  will  have  per¬ 
mission  to  access  only  e-mail,  the  in¬ 
tranet  Web  site  and  specific  sales  force 
tools.  On  the  other  hand,  a  Unix  admin¬ 
istrator  will  have  permission  to  access 
the  gateway  servers  we  use  to  control 
access  to  our  critical  Unix  servers. 

We  also  plan  to  require  the  use  of  a 
token  for  those  individuals  who  have 
permission  to  access  critical  servers  via 
their  wireless  connections.  This  way,  if 
a  compromised  laptop  has  passwords 
either  stored  in  clear  text  or  cached  in 
the  application,  the  potential  hacker 
won’t  be  able  to  break  in  unless  he  has 
the  user’s  token.  This  may  seem  like  a 
lot  of  extra  overhead  on  our  users  and 
their  equipment,  but  we  can  make  it 
virtually  invisible  to  the  end  users  — 
aside  from  the  occasional  requirement 
to  reauthenticate  and  present  the 
SecurlD  token. 

There  are  certain  levels  of  exposure 
with  almost  any  technology,  and  wire¬ 
less  is  no  different.  However,  Cisco’s 
technology,  coupled  with  our  current 


THISWEEK'SGLOSSARY 

Service  Set  Identifier:  SSID  is  a 
code  attached  to  packets  sent  over  the 
wireless  LAN  that  functions  as  a  pass¬ 
word  for  communicating  between  wire¬ 
less  clients  through  a  wireless  hub,  or 
access  point.  All  access  points  in  a  net¬ 
work  must  use  the  same  SSID  to  com¬ 
municate. 

Wired  Equivalent  Privacy:  WEP  is  a 

key-based  IEEE  802.11  data  encryption 
protocol  designed  to  provide  a  wireless 
LAN  with  protection  against  data  eaves¬ 
dropping.  The  technology  has  been  de¬ 
feated  by  hackers  and  is  considered  in¬ 
sufficient  for  enterprise  security  needs. 

A  stronger  802.11e  specification  is  still 
under  development. 

LINKS: 

www.  n  w  fusion,  com/primers/ 
wlan/wlanscript.html:  If  you’re  new 
to  wireless  technology,  this  Web  page 
includes  a  good  primer. 

www.  isaac.  cs.  berkeley.  edu/ 
isaac/wep-faq.html :  Read  this 
informative  analysis  to  better  under¬ 
stand  WEP’s  weaknesses. 

www.  cisco,  com/warp/public/44/ 
jump/wireless.shtml:  Visit  this  page 
for  detailed  information  on  Cisco’s 
Aironet  products. 

www.  cisco,  com/warp/public/ 
784/packet/jul01/p74-cover. 
html:  This  story,  “Securing  the  Wire¬ 
less  LAN,"  published  in  Cisco’s  Packet 
magazine,  describes  the  Aironet  archi¬ 
tecture  and  its  security  features. 


installation  of  RADIUS  and  VPN  ser¬ 
vices,  should  provide  a  reasonably  se¬ 
cure  environment  for  our  employees. 

Our  security  team  presented  its  rec¬ 
ommendations  to  upper  management, 
and  they  have  agreed  with  the  pro¬ 
posed  design.  The  next  step  is  getting 
the  new  infrastructure  into  the  lab  to 
ensure  everything  works  as  planned. 

But  we’re  not  done  yet.  If  you’ve  had 
a  chance  to  play  in  the  wireless  space 
and  can  offer  some  suggestions,  please 
feel  free  to  share  your  experiences  in 
the  Security  Manager’s  Journal  forum.  I 


This  week’s  journal  is  written  by  a  real  security 
manager,  “Mathias  Thurman,"  whose  name  and 
employer  have  been  disguised  for  obvious  reasons. 
Contact  him  at  mathiasJhurman@yahoo.com.  or  join 
the  discussion  in  our  forum. 

QuickLink:  a1590 

To  find  a  complete  archive  of  our 
Security  Manager's  Journals,  go  online  to 

www.computerworld.com/smj 
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Consulting  comp,  in  Little  Rock, 
AR.,  req.  Prog.  Analyst  w/BS  deg. 
&  2  yrs.  exp.  or  its  equivalent. 
Equivl.  is  based  on  educ.  &  exp. 
evaluation. 

Skills  Req:  COM  routines,  Visual 
Basic,  Oracle,  PL/SQL,  Seagate 
Crystal  Reports,  SQL  Server, 
Data  Modeling. 

Applicant  should  also  have  exp. 
installing,  maintaining  personal 
network.  Dev.  plans,  specifications, 
programs,  reports.  Analyze, 
design,  dev,  client  server  appl. 
Travel  &  reloc.,  to  anywhere  in 
the  USA  as  assigned. 

Apply  w.  Resume  to:  Redysoft, 
Inc.,  Attn:  Recruiter:  1319  Mesquite 
Dr.,  Little  Rock,  AR  72211. 


Full-time  Computer  Software 
Engineer.  Responsible  for  de¬ 
signing,  developing,  testing 
&  maintaining  customized  soft¬ 
ware  using  Unix,  MS  DOS,  C, 
C++,  COBOL,  Fortran,  Pascal, 
VB,  PowerBuilder,  Oracle  & 
Windows  SDK.  Develop  & 
direct  software  system  testing 
procedures,  programming  & 
documentation.  Perform  user 
requirement  studies,  coding, 
implementation  &  assist  w/ 
maintenance  of  programs.  Con¬ 
duct  detailed  analysis  of  all 
defined  system  specifications 
in  system  &  customer  require¬ 
ments  or  equipment  configuration. 
Consult  w/customers,  provide 
technical  support  &  troubleshoot 
any  defects  found.  Must  have 
Bachelor's  degree  in  Computer 
Science  or  related  field.  Foreign 
degree  equivalent  accepted. 
Must  have  2  yrs.  of  exp.  in  job 
offered  or  position  w/same 
duties.  Send  resume:  Natasha 
Lyttle,  SITA  INC,  Ref.#  PARN, 
3100  Cumberland  Blvd.,  Suite 
200,  Atlanta,  GA  30339. 


Multiple  openings.  E-Commerce 
Presentation  Developer.  San 
Francisco,  CA.  Resp.  for  design, 
doc.  &  dev.  ".com”  properties 
for  site-specific,  non-enterprise 
wide  solutions.  Create  Internet/ 
Intranet  architectural  framework 
for  E-commerce.  Dev.,  modif. 
&  imple.  complex  info,  systems 
for  various  projects.  Top-level 
technical  contributor  in  one  or 
more  highly  specialized  phases 
of  applications  development  and 
provide  tech  consulting  on  pro¬ 
jects.  May  instruct,  direct  work  of 
programming  pers.  and  train 
less  exp.  analysts.  Req.:  BS  in 
Computer  Science  or  Mathemat¬ 
ics.  Working  knowledge  through 
academic  coursework  or  experi¬ 
ence)  of  Unix,  C++,  Java  Script, 
JAVA,  XML  and  XSL.  In  lieu  of 
bachelor's  degree  will  accept 
equivalent  progressive  work  ex¬ 
perience.  Resume:  Lori  Hubbard, 
Federated  Systems  Group,  5985 
State  Bridge  Rd,  Duluth,  GA 
30096. 


Java  Developer,  Wachovia  Corp. 
Charlotte,  NC.  Interpret  func¬ 
tional  specs  &  translates  them 
into  appl.  designs,  logical  flows 
&  class  models.  Dvlp.  appl.  in 
Java,  using  XML  &  XSL,  w/Visual 
Age  for  Java  dvlp.  envir.  Reqs. 
BA  in  Comp.  Science  &  1  yr 
exp.  in  pos.  off.  or  as  a  Software 
Engineer.  The  1  yr  reqd  exp. 
must  incl.  work  w/  translating 
designs  into  appl.  code,  unit  test¬ 
ing,  integration  testing,  prog,  on 
HP  &  Sun  Unix  platforms  in  C++, 
Java,  Javascript  &  HTML  &  DB2 
database  &  performing  test 
queries  to  dvlp.  test  data.  40hrs/ 
wk,  $47K-$80K,  Send  resume 
&  cvr.  Itr.  to  Randy  Buck,  1 525 
West.  W.  T.  Harris  Blvd.,  NC 
0775,  Charlotte,  NC  28288- 
0775.  No  phone  calls  please. 


ForestExpress,  LLC,  the  leading 
business-to-business  marketplace 
for  buying  and  selling  forest 
products,  currently  seeks  appli¬ 
cants  for  the  following  positions 
in  its  Atlanta,  GA  corporate  of¬ 
fices:  Senior  Architect:  bachelor's 
in  engineering,  computer  science, 
math  or  related  field  plus  seven 
years  of  hands-on  application 
and  structured  system  design/ 
system  integration  experience 
including  two  years  experience 
with  distributed  computing 
protocols  DCOM,  CORBA  and 
XML.  Client  Delivery  Manager: 
bachelor's  in  computer  science 
or  engineering  plus  five  years  of 
relevant  experience  to  include 
at  least  two  years  of  ERP  software 
project  management.  For  con¬ 
sideration,  please  forward  your 
resume,  along  with  a  statement 
indicating  the  position  you  are 
applying  for,  to:  ForestExpress, 
LLC,  attention:  Human  Resources, 
500  Northridge  Road,  Ste.  400, 
Atlanta,  GA  30350.  No  phone 
calls  please.  EOE. 


Siebel  Application  Programmer/ 
Configurator:  Analyze,  design, 
implement,  monitor,  support, 
and  document  the  functional 
software  modules  within  the 
Siebel  eBusiness  application 
system.  Participate  as  a  member 
of  the  Siebel  Center  of  Excel¬ 
lence  team  in  analyzing  users’ 
needs  and  requirements,  and 
translate  detailed  specifications 
into  Siebel  configuration  solu¬ 
tions.  Supports  concurrent  Siebel 
project  teams.  Requires  24-hr/ 
7-day  phone-available  support 
coverage.  Seven  (7)  years  relevant 
experience  in  systems  analysis 
and  programming  of  business 
systems,  at  least  two  years 
specifically  involving  Siebel  pro¬ 
gramming  for  direct-to-consumer 
business  production  support. 
Experience  with  Siebel's  Mobile 
Clients  &  Synchronization,  and 
Consumer  Goods  Sales;  UNIX 
shell  scripting;  Oracle  Rel.  8  or 
higher.  Salary  Range:  $93,000  - 
$1 00,500  per  year,  together  with 
medical,  dental,  life  and  disability 
insurances,  two  weeks  paid 
vacation,  401  (k)  and  employee 
pension  plans.  Send  resume  to  D. 
Neville,  Bose  Corporation,  MS 
5D2,  The  Mountain,  Framingham, 
MA  01701  daphine  neville@ 
bose.com.  Reference  job  # 
1 1 22HS.  Visit  www.bose.com 
An  equal  opportunity  employer. 


♦ 


Management  Analyst.  8a-5p.  40 
hrs/wk.  Conduct  organizational 
studies;  eval  data,  systm  & 
procedures;  dvlp  &  implmt  prgm 
to  streamline  operations;  provide 
logistics  report  using  Visio, 
Rational  Rose,  Lotus  Domino 
R5,  Java,  Java  Security,  J2EE, 
EJB,  CORBA,  VC++,  VB  Script, 
Oracle,  SQL,  &  AS/400.  Reqs: 
Bach  or  equiv  in  Bus  Admin, 
Economics,  Acctg,  Info  Systms, 
Comp  Sci/Engg.  2  yrs  exp  in  job 
offd  or  as  Systms/Prgmr  Analyst. 
Resume  to:  GTS,  Inc.,  3761 
Venture  Dr.,  Bldg  100,  Ste#  240, 
Duluth,  GA  30096. 


iQuantic  Buck  Consultants  seeks 
Software  Engineer  with  software 
development  experience  in 
HTML  applications  to  work  out  of 
our  San  Francisco  office.  Send 
resume  to  Buck  Consultants, 
Inc.,  500  Plaza  Dr.,  Secaucus, 
NJ  07096  or  on-line  at  resumes- 
JXPQbuckconsultants.com. 

refer  to  Software  Engineer  -  JH. 


Responsible  for  coding,  designing 
and  re-engineering  Web  appli¬ 
cations  for  clients.  Write  applica¬ 
tions  using  C++,  Rational  Rose, 
UML  and  object  oriented  analysis 
and  design.  Responsible  for 
dealing  with  the  business  partners 
in  gathering  the  requirements 
and  creating  specifications.  Must 
have  a  Bachelor’s  degree  in  CS 
or  foreign  degree  equivalent. 
Must  have  1  yrs  of  exp.  in  job 
offered.  Salary  Competitive: 
send  resume  to:  Raj  Shekaran 
Software  Research  Assoc.  70 
Mansell  Ct.  Ste.  100  Roswell,  GA 
30076. 

IT  Developer  3  -  Boston,  MA, 
Evergreen  Investments.  Interpret 
bus.  reqs.  &  recommend  tech, 
alternatives,  solutions,  tools,  & 
platforms.  Reqs.  BA  in  Comp. 
Science,  Eng.  or  rel.  disc.  &  3  yrs 
exp.  The  3  yrs  exp.  must  incl. 
work  w/  new  appl.  dvlp.,  object- 
oriented  analysis,  design,  coding 
&  testing,  &  Java  &  middleware 
tech.,  XML  &  web  servers. The  3 
yrs  exp.  must  also  incl.  dvlp.  & 
deploying  appl.  on  Microsoft  & 
Sun  platforms.  40hrs/wk,  8-5, 
$78K-$98K,  Send  resume  &  cvr. 
Itr.  to  Luzanna  Korshuk,  200 
Berkeley  Street,  Boston,  MA 
021 1 6.  No  phone  calls. 

Programmer/Analyst  (Jacksonville, 
FL):  Analyze,  design,  develop, 
implement  &  maintain  Oracle 
Developer  2000  Forms/Reports 
6i,  PL/SQL,  UNIX,  Shell  scripts, 
OLAP,  DSS,  ETL  Tools,  EDI 
Interface,  Oracle  Query  Opti¬ 
mization  strategies  and  Data¬ 
base  Design.  Req.  B.Sc.  or  its 
foreign  degree  equivalent  in 
C.Sc.,  E.  Engg,  or  other  related 
engineering  field  +  2  yrs  exp.  in 
job  offered.  Resume  to:  HR 
Manager,  SoftTech,  Inc.,  6025 
The  Corners  Pkwy,  Suite  204, 
Norcross,  GA  30092 

Ld.  Programmer/Analyst,  wanted 
by  recruitment  org.  in  Melville, 
NY.  Reqd  BE  or  equiv  +  3  yrs  exp 
incl  Oracle,  SQL,  SQR  &  exp 
w/PeopleSoft.  Fax  resume  to  M. 
Storelli  at  (631)844-7426. 

Database  Administrator  (Pharma/ 
Finance)  wanted  by  New  Jersey 
based  Co  involved  in  Quantitative 
Marketing  Analysis  for  Pharma¬ 
ceutical  Industry.  Must  have 
Masters  in  Comp.  Sc.,  MBA 
(MIS/Finance)  or  equivalent,  and 
2  years  of  experience  in  com¬ 
puter  software  developing  and / 
or  consulting.  Must  also  be 
proficient  in  Oracle,  RDBMS 
managing  tuning  data  and 
understanding  financial  concepts. 
Must  also  have  Oracle  certifica¬ 
tion.  Respond  to:  HR  Dept., 
Health  Products  Research,  Inc., 
3498  Route  22  West,  P.  O.  Box 
500,  Whitehouse,  NJ  08888- 
0500.  Fax:  (908)  534-9472,  e-mail: 
careers@HPRmail.com.  /Ref: 
GG8206IM). 

Network  Administrator:  Design, 
develop,  deploy  and  maintain 
TCP/IP  Networks  using  Windows 

NT,  Checkpoint  Firewall,  Windows 

NT  domain  with  PDC,  BDC,  and 

services  such  as  DNS,  WINS, 

etc.  Perform  configuration  & 

administration  of  Cisco  Routers. 

Manage  internal  network.  Req: 
Bachelor  of  Sci.  in  Comp.  Sci., 
Eng.,  or  Related  (or  U.S.  equiv.) 

&  2  yrs.  exp.  Mail  resume  to:  DCT 
Systems  Group,  3100  Medlock 
Bridge  Rd.,  Norcross,  GA  30071 . 

Oracle  Applications  DBA.  Install 

&  adm.  Oracle  Apps  S/W  inc. 

d/base  &  implement  backup 

strategies.  Install  &  maintain 

Veritas  Netbackup  Datacenter. 

Write  PL/SQL  progs.  &  shell 

scripts.  Req:  Bachelors  in  Elect. 

Eng.,  Comp.  Eng.  or  Comp.  Sci. 

40-hr.wk.  Job/Interview  Site: 

Orlando,  FL.  Send  resume  to 

Virtual  Consulting  Services,  Inc., 

2013Tizewell  Cir.  #141 7,  Orlando 

FL  32837 

Programmer  Analysts  needed: 
Analyze  software  requirements; 
Research,  design  and  develop 
computer  software.  Work  with  3 
of  the  following:  Visual  Basic, 
Java,  C,  UNIX,  DB2,  DBA  and 
Data  Modeler.  Requires  BS 
degree  or  equivalent  and/or 
relevant  work  experience.  Mail 
resume,  transcripts,  references 
and  salary  requirements  to: 
NewGen  Technologies,  Inc., 

1300  S.  Farm  View  Drive  #D36, 

Dover,  DE  19904. 

Software  Programmer  wanted 

by  New  Jersey  based  Co  for  job 

locations  throughout  the  US. 

Must  have  Bachelors  in  Comp. 

Sc.,  Engg.  3  years  of  experience 

in  computer  software  develop¬ 
ment  and/or  consulting  and  pro¬ 
ficiency  in  Oracle,  JAVA,  HTML, 

Weblogic,  JDBC  drives,  EJB/ 

JSP.  Respond  to:  HR  Dept., 

eComServer,  Inc.,  116-200 

Village  Boulevard,  Princeton,  NJ 

08540.  (Ref:  GG8228IM). 

Software  Engineers 

Design,  develop,  test  and  imple¬ 
ment  software  using  Java,  J2EE, 
Weblogic/Websphere,  Distributed 
Technologies,  Rational  Rose, 
UML,  Oracle,  and  SQL  Server 
on  Windows  NT/2000,  UNIX. 
Prevailing  wage/benefits.  Send 
resume  to  HR,  Radiumsoft,  4470 
Chamblee  Dunwoody  Rd.,  Suite 
200,  Atlanta,  GA  30338.  EOE. 

Application  Design  Architect 

wanted  by  Financial  Services 

Firm  in  Purchase,  NY  to  perform 

database  design,  architectural 

&  modeling  functions.  Must  have 

Bachelor's  degree  in  Comp  Sci, 

Math,  Elec  Engg  or  Finance 

&  5yrs  s/ware  exp.  Respond  to: 
HR  Dept,  Independent  Financial 

Marketing  Group,  Inc.,  100 

Manhattanville  Rd,  Purchase,  NY 

1 0577:  via  e-mail:  hr@  ifma.com. 

or  via  fax:  914-641-4770. 

Sr.  Software  Consultant  for 

NJ  based  Co  for  client  locations 

in  the  USA.  Must  have  Master's 

degree  in  Comp.  Sc.,  Engg.,  six 

years  of  experience  in  Comp. 

S/W  developing  and/or  consulting 

and  proficiency  in  J2EE,  EJB, 

CORBA,  ATG  Dynamo,  Web 

Logic.  Respond  to:  HR  Dept., 

Y-Point,  Inc.,  1  Bethany  Road, 

Suite  62,  Building  5,  Hazlet,  NJ 

07730.  (Ref:  GG8146IM). 

SOFTWARE  ENGINEER  wanted 
by  toys  online  co.  in  Houston,  TX. 
Must  have  M.S.  degree  &  exp. 
Respond  by  resume  only  to: 
Mr.  P.  Gulla,  V.P.  I'nx  Corp., 
6201  BonHomme,  Ste  168-F, 
Houston,  TX  77036. 

Computer  s/ware  co.  in  Iselin, 
NJ  seeks  Programmr/Systems 
Analysts/Softwre  Engrs.  All 
positions  req  Bach  degree  in 
Comp  Sci/Comp  Eng/Math  or 
reltd  field  &  1-3  yrs  exp.  Send 
resume  to:  FTI,  194  Wood  Ave 
South,  6th  fl,  Iselin,  NJ  08830  or 
to:  recruit@ttisoft.com.  Heading: 
P/SA/SE. 

Programmer-Analyst  (F/T). 

New  York.  NY.  Analyze  user 

requirements,  design,  develop 

and  implement  network  man¬ 
agement  software  using  C++, 

Java,  Sybase,  and  Unix/windows 

2000.  BS  in  Computer  Engineer¬ 
ing/Computer  Science  with  one 

year  related  experience.  Send 

resume  to  HR.,  Mercury  &  Mien, 

33  West  17th  St.,  NY.  NY  10011 

A  new  millenium,  a  new  solution.  ITcareers. 
Call  Janis  Crowley  at  1-800-762-2977  W  IDG 

Recruitment  Solutions 


Systems  Engineer  for  leading 
provider  of  customized,  value- 
added  logistics  solutions  to 
develop  and  maintain  computer 
systems  utilizing  various  data¬ 
base  servers  and  applications. 
Min  req.  Bach,  in  Computer 
Science  plus  2  yrs.  exp.  in  RPG 
ILE/IV/400.  Send  resumes  to 
TNT  Logistics  North  America, 
10407  Centurion  Parkway  North, 
Suite  400  Jacksonville,  FL 
32256.  Ref  808YL. 


Programmer/Analyst  for  leading 
provider  of  customized,  value- 
added  logistics  solutions  to 
design,  install  and  document 
new  programs  and  modifications 
to  existing  programs.  Min  req. 
Bach,  in  Computer  Science  plus 
2  yrs.  exp.  or  4  yrs.  professional 
exp.  Send  resumes  to  TNT 
Logistics  North  America,  1 0407 
Centurion  Parkway  North,  Suite 
400  Jacksonville,  FL  32256. 
REF-CT  201 . 


Programmers,  Jr.  Programmers, 
Software  Engineers 
Design,  develop,  test  and  imple¬ 
ment  specialized  software  apps 
using  Novera,  Web  Integrator, 
IFD,  MMD,  TTM,  PM,  SCADA, 
CD  Requester,  java,  C,  C++,  VB, 
EDI,  ANSI  X12,  DNP3.0  Modbus 
and  Mercator,  SPARC  HA,  RMI, 
C:D  and  Apache  Web  Servers. 
US  Workers  only.  Consulting 
positions  requiring  travel. 
Prevailing  wage/benefits.  Send 
resume  to  HR,  G.R.  Patel  & 
Associates,  Inc.  P.O.  Box  1008, 
Waldorf  MD  20604. 


Software  Engineer  for  Houston 
co.  involved  in  developing  engi¬ 
neering  software  and  services 
for  energy  transmission  compa¬ 
nies  and  distribution  utilities  to 
research,  design  and  develop 
computer  software  systems 
for  simulation  and  modeling 
applications.  Must  have  strong 
knowledge,  and  working  experi¬ 
ence  with  ef-CORBA,  DCOM, 
ROP  methods,  OOAD  and  OOP 
Bach,  in  Software,  Electronics  or 
Communications  Engineering 
and  2  yrs.  experience.  Send 
resumes  to  Anaie.McPherson® 
AdvanticaStoner.com. 


System  Administrators  needed: 
Perform  analysis  tuning;  Implement 
and  plan  recovery  operations. 
Work  with  3  of  the  following: 
SUN  El 0k,  EMC  Symmetrix, 
SAN,  EMC  SRDF,  Net  Apps 
F840  Filers,  SUN  Cluster. 
Requires  MS/BS  degree  or 
equiv.  and/or  rel.  work  exp.  Mail 
resume,  trans.,  ref.  and  salary 
req.  to:  Net  Effects,  Attn: 
Michelle  Zipfel,  500  Chesterfield 
Center,  #350,  Chesterfield, 
MO,  63017. 


Call  your 
ITcareers  Sales 
Representative 
or  Janis  Crowley. 

1-800-762-2977 
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IT  Developer,  Wachovia  Corp. 
Charlotte,  NC.  Interpret  bus. 
reqs.  &  define  tech,  alternatives, 
tools,  &  platforms  for  enterprise 
systems.  Focus  dvlp.  efforts  on 
employee-facing  web  appl.  & 
data  warehousing  components. 
Reqs.  MA  in  Comp.  Science, 
Eng.  or  rel.  disc.  &  1  yr  exp.  The 
1  yr  must  incl.  work  developing 
comp,  systems  &  web  appl.  using 
Oracle  8,  PeopleSoft  7.0,  HTML, 
Java,  JavaScript,  SQL,  Active 
Server  Pages,  Cold  Fusion,  & 
Java  Servlets.  The  1  yr  must  also 
incl.  work  w/  data  warehousing, 
data  modeling,  ETL  &  data 
analysis  using  OLAP  tools.  Grad, 
coursework  must  incl.  work 
w/database  tech.  &  graphical 
user  interfaces.  40hrs/wk,  Send 
resume  &  cvr.  Itr.  to  Randy  Buck, 
1 525  West.  W.  T.  Harris  Blvd., 
Charlotte,  NC  28288-0775.  No 
phone  calls  please. 


Sifa  Infotech  Inc.,  has  multiple 
openings  (dr  Programmer/Analyst, 
Software  Engineer,  Project  Leader/ 
Manager,  Technical  Recruiter/ 
Writers  IT  Accounts  Manager. 
Please  send  a  detailed  resume 
with  salary  history  and  require¬ 
ments  to:  9572  Topanga  Canyon 
Blvd.,  Chatsworth,  CA  91311  or 
via  email  to:  infotech@sifa.com 


FUJIFILM  Software 
(California),  Inc. 

We  have  multiple  opportunities 
available  for  software  engineers 
in  our  San  Jose,  CA  office: 

Must  have  min.  req.:  BS  in 
CS/EE;  4+  yrs.  hands  on  exp. 
programming  w/  Win32,  C++, 
MFC,  COM,  VB;  2+  yr  w/  ASP, 
HTML,  JavaScript,  VBScript, 
GUI  design  &  dev;  and  1  +  yr  exp. 
w /  Java,  JNI,  JSP,  JServ,  Oracle 
or  SQL,  InstallShield.  Need  exp. 
w /  scalable,  multithreaded  and 
distributed  architecture. 

Email:  hr@fujifilmsoft.com 
Fax:  408-501-2165 


Seeking  qualified  applicants  for 
the  following  position  in  Mem¬ 
phis,  TN: 

Senior  Proorammer  Analyst, 

Revenue  Systems:  Formulate/ 
define  functional  requirements 
and  documentation  in  a  mainframe 
environment  based  on  accepted 
user  criteria.  Requirements: 
bachelor's  degree  or  equivalent* 
in  computer  science,  MIS  or 
related  field  plus  5  years  of 
experience  in  systems/applica¬ 
tions  development  in  a  mainframe 
environment.  Experience  with 
COBOL,  File-Aid  and  Expeditor 
also  required.  ‘Equivalent  is 
based  upon  a  combination  of  ed¬ 
ucation  and  experience  (three 
years  of  experience  equals  one 
year  of  education)  as  determined 
by  a  credentials  evaluator.  Submit 
resumes  to  Christin  Decker, 
FedEx  Corporate  Services,  1 900 
Summit  Tower  Blvd.,  Suite  1400, 
Orlando,  FL  3281 0.  EOE  M/F/D/V. 


2  Openings  for  a  PC/Database 
Technical  Support  Specialist. 
Must  have  Bachelor's  degree 
in  Business  Administration/ 
Computer  Science/Computer 
Management  and  one  year 
experience.  Will  provide  support 
on  desktop  applications  and 
evaluate  user  needs  and 
requirements.  Send  resume  to: 
HR  Dept,  M.E.I.  Computer 
Services,  18  North  Wolf  Road, 
Northlake,  IL  60164. 


Multiple  openings.  Sr.  E-Com¬ 
merce  Presentation  Developer, 
San  Francisco,  CA.  Dsgn,  doc  & 
dev  ".com"  properties  for  site 
specific  solutions.  Provide  tech 
consulting.  Prep  estimates  for 
new  projects,  enhancements 
&  maintenance.  Recommend 
systm  solutions  to  customers. 
Code  &  implmt  advanced 
well-dsgnd,  efficient  prgms  in 
conformity  to  Co.  standards  & 
methodology.  Resp  for  dev  Prod¬ 
uct  display,  Customer  Care  & 
personalization  modules  on  web 
site.  Dev  Change  Mgt.  Sys.  using 
Rational  Clearquest  &  SQL 
Server  to  organize  dvlpmt 
envrmt.  Utilize  Envrmt/Tools  JDK 
1.2,  JDBC  1.2,  Java  Servlets, 
JSP,  XML,  IBM  WebSphere, 
DB2,  Win  NT  4.0,  IBM  AIX.  Req: 
MS  deg  (or  frgn  eqv)  in  Comp 
Sci  Engg  or  closely  rel  field.  3  yrs 
exp  in  job  offd  or  in  S/ware 
Analysis.  In  lieu  of  MS  deg  & 
3  yrs  exp,  will  accept  BS  in  one 
of  stated  fields  &  5  yrs  progres¬ 
sive  exp  in  job  offd  or  s/ware 
analysis.  2  yrs  exp  (which  may 
have  been  obtained  concurrently) 
w/Oracle,  Java  Servlets,  Java 
Script  &  PowerBuilder.  Resume: 
Lori  Hubbard,  Federated  Systems 
Group,  5985  State  Bridge  Rd, 
Duluth,  GA  30096. 


Multiple  computer  positions  as 
follows: 

Financial  Systems  Internet  Prod¬ 
uct  Developer  to  analyze  user 
requirements,  procedures  and 
problems  to  automate  processing 
and  improve  operations  of  inter¬ 
national  banking  industry  and 
create  user  friendly  financial 
internet  cites.  Degree  and  exper. 
required  in  job  offered.  Competitive 
salary. 

Systems  Analyst  to  analyze  user 
requirements,  procedures  and 
problems  to  automate  processing 
and  to  improve  existing  opera¬ 
tions  for  banking  industry.  Bach, 
and  exper.  required  in  job 
offered.  Competitive  salary. 
Senior  Systems  Engineer  to 
research,  develop  and  design 
computer  software  systems  for 
statistical  analysis  and  large 
data  warehouses  using  scientific 
principles  and  mathematical 
models.  Bach,  and  exper.  required. 
Competitive  salary. 

Send  resumes  to  Juan  Carlos 
Vizcaino,  Todo  1  Services,  Inc., 
7600  N.W.  19th  Street,  #600, 
Miami,  FL  33126. 


Technical  Support  Analyst  II 

Perform  System  Adm.  functions 
in  mixed  UNIX  env.  Incl.  Hewlett 
Packard,  SUN,  &  Stratus  to 
maintain  operational  readiness 
of  mult.  sys.  Install  &  support 
UNIX,  to  include  installation/ 
updating  of  current  software  ver¬ 
sions  &  patch  loading.  Identify, 
plan,  &  assist  w/inst.  of  software, 
hardware,  &  firmware  upgrades 
of  sys.  Assist  other  System  Adm. 
w/continued  integration  of  UNIX. 
B.S.  in  EE,  CS  or  rel.  &  2  yrs. 
exp.  in  above  pos.  or  2yrs.  exp. 
as  UNIX  System  Adm.,  oriel.  w/HP- 
UX,  Solaris,  or  Stratus  O/S;  exp.  in 
cust.  support  functions  for  a  large- 
scale  env.;  &  exp.  w/Vmark’s 
Universe  database  appl.  Lang.  & 
Ingres  &/or  Oracle.  40.0  hr/wk. 
8-5.  Send  resume  to:  Paul  W. 
Ruth,  Director,  Cobb  County  In¬ 
formation  Services  Dept,  100 
Cherokee  St.,  Ste.  520,  Mariet¬ 
ta.  GA  30090 


Venturi  seeks  I.S.  Analyst  for 
Kirkland,  WA  office.  DESC:  Prov. 
comp.  sys.  consult,  to  max.  I.S. 
efficiency;  dsgn,  dev,  &  impl. 
financial  &  cost  mng.  aps.  util. 
RDBMS,  SQL,  VB,  XML,  ASP, 
OLE  DB,  IIS,  &  Win  o/s.  Incorp. 
&  impl.  NT  authentication  util. 
COM+.  REQ:  BS  in  Engr,  CS, 
MIS,  Math,  or  Physics  +  2  yrs. 
exp.  in  duties  of  job  offered. 
Prem.  sal.  +  bns.  &  benes.  Pis. 
reply  to  J.  King,  Job#  VT-101, 
11255  Kirkland  Way,  Kirkland, 
WA  98033. 


COMPUTER  PROFESSIONALS 
Opportunities  for: 

•  WEB  ARCHITECTS/ 
DEVELOPERS 

•  SYSTEMS  ANALYSTS 

•  WEB  GRAPHIC  DESIGNERS 

•  NETWORK  ENGINEERS 

•  PROGRAMMER/ANALYSTS 
•SOFTWARE  ENGINEERS 

SKILLS: 

•  COLD  FUSION  •  SPECTRA 

•  ORACLE  •  VISUAL  BASIC 

•  VISUAL  C++  •  SIEBEL  •  ASP 

•  COM,  DCOM  •  JSP  •  HTML 

•  JAVA,  JAVA  BEAN  •  EJB  JAVA 
SERVLETS  •  WEBSPHERE 

•  IBM  MQ  SERIES  •  XML,  UML 

•  MTS  •  CLARIFY  •  PERL 
•OBJECTPERL  •  SPYPERL 

•  SMALLTALK  •  PL/SQL 

•  VISUAL  AGE  •  COBOL,  SPL, 
UNIX 

Visit  our  website  @ 
www.computerhorizons.com 

Attractive  salaries  and  benefits. 
Please  forward  your  resume  to: 
H.R.  Mgr.,  Computer  Horizons 
Corp.  49  Old  Bloomfield  Avenue, 
Mountain  Lakes,  New  Jersey 
07046-1495.  Call  973-299-4000. 
E-mail:  jobs  @  computerhorizons. 
com.  An  Equal  Opportunity  Em¬ 
ployer  M/F. 


SENIOR  SAP  CONSULTANT 

Provide  SAP  bus.  process  re¬ 
engineering,  customization,  soft¬ 
ware  and  custom  programs 
dvlpmnt  and  systems  analysis 
to  the  co.'s  consulting  clients; 
gather,  analyze  and  evaluate 
client's  bus.  requirements,  consult 
with  clients  to  determine  bus. 
and  tech,  needs  in  terms  of 
software,  bus.  environment  and 
industry-specific  reporting/legal 
requirements;  map  existing  bus. 
and  software  processes  and 
identify  appropriate  SAP  solutions 
with  appropriate  bus.  process 
re-engineering  to  fully  meet 
client's  bus.  and  tech,  needs  and 
requirements;  design,  customize, 
dvlp,  test,  implement  and  main¬ 
tain  appropriate  SAP  solutions; 
identify  gaps  between  bus. 
processes  and  SAP  practices 
and  dvlp  strategies  to  address 
these  gaps;  dvlp  add-ons  and 
deploy  enhanced  SAP  function¬ 
ality;  prepare  tech,  specs,  for 
reports  as  needed  in  order  to 
ensure  user  satisfaction  and 
success  with  SAP  implementa¬ 
tion;  identify  potential  SAP  bus. 
opportunities  and  prepare  bus. 
models/action  plans  for  new  bus. 
dvlpmnt.  Master's  degree  in 
Comp.  Sci.,  Bus.,  Math,  Engi¬ 
neering  or  Commerce  +  3  yrs. 
exp.  in  position  offered  or  as  a 
Programmer  Analyst,  Systems 
Analyst  or  Software  Engineer. 
Exp.  must  include  implementa¬ 
tion  of  SAP  R/3  Project  Systems, 
Asset  Mgmt,  Investment  Mgmt 
and  Time  Entry  (CATS)  Modules 
including  close  integration  with 
other  SAP  R/3  modules.  40 
hrs/wk,  8  am  -  5  pm,  OT  as 
reqd.,  $110,000/yr.  Qualified 
applicants  submit  resumes  to 
Manager,  Washington  County 
Team  PA  CareerLink,  Millcraft 
Center,  Suite  150LL,  90  West 
Chestnut  Street,  Washington,  PA 
1 5301  -4517.  Please  refer  to  Job 
Order  No.  WEB  244518. 


Programmer  Engineer 

A  Chicago  are  computer  company 
is  looking  for  a  Programmer 
Engineer  to  design,  write,  upgrade 
and  customize  specialized  soft¬ 
ware  for  individual  clients  and 
their  specific  business  needs, 
especially  dry-cleaning  business, 
and  to  provide  troubleshooting 
and  technical  support  to  clients. 
40  hrs/wk,  9am-5pm,  $51,000/ 
yr.  B.S.  in  Computer  Science 
required.  Mini.  1  yr  related  expe¬ 
rience.  Applicant  must  show 
proof  of  legal  authority  to  work  in 
the  U.S. 

Applicants  should  send  resume 
to: 

Illinois  Dept,  of  Employment 
Security 

401  S.  State  St.  -  7  North 
Chicago,  IL  60605 
Ref#\/-IL27191  -  K 
AN  EMPLOYER  PAID  AD 
NO  CALLS-  SEND  2  COPIES 
OF  BOTH  RESUME  &  COVER 
LETTER 


Be  the  Face  of  America  to  the  World 


Foreign  Service  Specialist  —  LAN/WAN  Administrators 


Becoming  a  Foreign  Service  Specialist  at  the  U.S. 
Department  of  State  offers  a  world  of  opportu¬ 
nities.  You  will  be  an  integral  part  of  a  team 
dedicated  to  representing  Americas  interests  in 
other  countries. 

If  you'd  like  to  serve  your  country  while 
performing  important  work,  the  Foreign 
Service  is  the  ideal  career  choice. 

This  is  an  exceptional  opportunity  to 
work  with  foreign  and  U.S.  digni¬ 
taries,  make  a  difference  in  the 
world  and  gain  valuable  experience 
that  will  last  a  lifetime. 

During  the  course  of  your  career,  you 
will  be  called  upon  to  serve  at  several  of 
250  diplomatic  posts  worldwide.  After  comple¬ 
tion  of  a  training  program  in  Washington,  D.C., 
your  responsibilities  will  include  administration 
and  maintenance  of  personal  computers, 
LAN/WAN  networks,  office  automation  soft¬ 
ware,  network  operating  systems,  implementing 


IT  industry  standards,  network  protocols  and 
technology  trends.To  qualify,  you  must  be  willing 
to  relocate  every  two  to  four  years,  and  have 
hands-on  experience  and/or  education  in  LAN 
network  administration  or  help  desk  support. 
Starting  salaries  range  from  $35,8 1 9-$52,278, 
with  a  generous  benefits  package. 

For  a  more  detailed  description 
of  responsibilities  and  qualifications 
for  Information  Management 
Specialist  (LAN/WAN)  and 
Information  Management  Technical 
Specialist  (LAN/WAN),  as  well  as 
instructions  on  how  to  apply,  visit 
www.careers.state.gov,  and  click  on 
“Foreign  Service  Specialist”  Or,  to  begin 
the  application  process  today,  please  send 
an  email  to:  imsmail@state.gov 

You  must  be  a  U.S.  citizen  to  apply. 

Equal  Opportunity  Employer 


U.S.  DEPARTMENT  OF  STATE 


PAREXEL  International  currently 
has  the  following  positions  avail¬ 
able: 

At  900  Chelmsford  Street,  Lowell, 
MA  office: 

Senior  Manager  E-Services  - 

Requires  Bachelor's  or  equiv  in 
CS,  Scientific  Engineering  field, 
or  related  plus  3  yrs  exp  in  clinical 
software  development,  including 
1  yr  in  statistical  analysis  and 
modeling  and  1  yrwith  expanded 
access  clinical  programs  (exp 
can  be  gained  concurrently). 
Must  also  have  knowledge  of  US 
and  European  drug  regulations. 
Oracle  Database  Administrator: 
Requires  Bachelor's  or  equiv  in 
Computer  Engineering,  CS,  MIS, 
or  related  field  plus  5  yrs  exp  in 
database  programming  using 
Oracle  in  an  NT  environment 
and  associated  networking  hard¬ 
ware. 

At  195  West  Street,  Waltham, 
MA  office: 

Programmer/Analyst:  Requires 
Bachelor's  or  equiv  in  CS,  Engi¬ 
neering,  Math,  or  related  field 
plus  2  yrs  exp  in  a  computer- 
related  position  uing  Oracle  and 
Java. 

Please  respond  to  hr@parexel. 
com  or  Attn  HR,  PAREXEL 
International  Corp.,  195  West 
Street,  Waltham,  MA  021 54.  EOE. 


Costco  seeks  Ul/App.  Progr.  for 
HQ  office  in  Issaquah.  DESC: 
Rev.  user  reqs.  &  bus.  specs, 
for  comp,  warehouse  inventory/ 
pricing  info.  sys.  Dsgn,  dev,  & 
impl.  Ul,  progs,  &  apps.  to  access 
info,  stored  on  DB2  util.  RPG  on 
AS/400  plats.  REQS:  2  yrs.  exp. 
dsgn,  dev,  &  impl.  Ul,  progs,  & 
apps  to  access  info,  stored  on 
DB2  util.  RPG  on  AS/400  plats. 
Prem.  sal.  +  benes.  Pis.  reply  to 
T.  Valdez,  Job#  CW-102,  999 
Lake  DR,  Issaquah,  WA  98027. 


It’s  like  having 

the  inside  track  on 

all  the  hottest  tech  jobs. 


ail  the  time. 


The  hottest  job  leads  you  can’t 
find  anywhere  else  are  all  right 
here.  That’s  because  Dice  is  all 
tech  jobs,  all  the  time.  Get  the 
inside  track  on  the  best  tech 
jobs.  Go  to  dice.com  today. 


O  2002  Oice.com 
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Project  Manager-Cross- 
Border  Deployment 

Duties:  Project  management  ot 
deployment  of  sophisticated 
enterprise  applications,  primari¬ 
ly  in  the  leasing  industry,  in  North 
America  and  other  countries. 
Liaison  with  clients  to  develop 
and  agree  on  deployment 
schedules  and  manage  all  pro¬ 
ject  activities  throughout  the 
lifetime  of  projects.  Budget  esti¬ 
mation  and  tracking  for  projects 
to  detail  level.  Communication  of 
all  project  progress  and  issues  to 
all  levels  of  project  members. 
Setting  up  support  organizations 
(both  client  and  consulting  orga¬ 
nizations)  providing  process, 
experience  and  guidance,  so 
support  staff  can  support  and 
maintain  delivered  applications. 
Supervision  of  project  and  support 
teams,  providing  guidance  and 
direction  in  al  areas.  Conducting 
assessments  and  providing 
developmental  feedback  wherever 
possible.  Requirements:  Bachelor 
of  Science  degree,  or  experience 
equivalent  to  a  Bachelor  of  Sci¬ 
ence  degree  in  Computer  Infor¬ 
mation  Systems,  Business  or 
Information  Technology.  Experi¬ 
ence:  One  year  in  the  position 
offered,  or  the  related  position  of 
Project  Manager.  Must  be  able 
to  document  one  year  of  experi¬ 
ence  in  cross  border  deployment 
of  enterprise  applications  in  the 
leasing  industry.  Please  apply 
online  atThoughtWorks.com. 


Protech  Solutions,  Inc.  Delivers 
Innovative  IT  solutions  to 
business  clients  nationwide.  We 
have  immediate  full  time 
opportunities  for  Programmers, 
Engineering  Programmers, 
Programmer  Analyst,  Systems 
Analyst,  Software  Engineers, 
DBA’s,  Consultants  and 
Software  Consultants  in  any  of 
the  following  areas: 
LAN/ANEnterprise  NW,  MS 
Exchange,  Web  Server, 
Terminal  Servers,  Desktop 
Deployment,  Software 
Distribution,  Visual  Studio,  Java, 
C++,  Oracle,  Dev  2000,  MTS, 
MSMQ,  DCOM,  Active  X,  SQL, 
DBA,  MCSD,  OCP,  HTML.SCJP, 
DHTML,  XML,  ASP,  XSL.CSS, 
MCD,COBOL,CICS,DB2, 
IMS,VSAM,TCL,  PL/1,  DBA, 
S/370, ES  9000.ADABAS, 
Natural,  ERP  Systems, 
SAP,  Peoplesoft,  Bachelor's 
/Master's  Degree  required, 
depending  on  position.  We 
also  accept  the  foreign 
educational  equivalent  of 
the  degree,  or  the  degree 
equivalent  in  education  and 
experience.  Excellent  benefits. 
Send  resume/salary  req.  to:  HR, 
Protech  Solutions,  Inc. 
124  W.  Capitol,  Suite  550,  Little 
Rock,  AR,  72201  or 
HR@protechsoft.com 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  design,  develop  and 
implement  internet-based  appli¬ 
cations  using  XML,  XSL,  Xpath, 
IIS/ASP,  JavaScript,  VBScript, 
Visio,  SQL,  SQL  Server  2000 
XML  features,  VB  MS 
Visual  InterDev,  Adobe  Photoshop, 
Fireworks,  Flash,  Dreamweaver, 
Adobe  Illustrator  and  MS.NET 
framework;  Coordinate  develop¬ 
ment  of  functionality  on  front-end 
application,  identify  deliverables, 
publish  release  notes,  and  ensure 
timely  completion  of  projects 
using  MS  Project;  Design  and 
Implement  XML/XSL  based  ap¬ 
plication  architecture  and  the 
ergonomics  of  front-end  applica¬ 
tion;  Design  and  implement 
browser  independent,  data  driven 
and  dynamically  generated  user 
interfaces  using  DHTML,  Java 
Script,  CSS  and  ActiveX  Controls. 
Require:  Master's  degree  in 
Computer  Science/Engineering 
Business  Administration,  or  a 
closely  related  field  with  one 
year  of  experience  in  the  job 
offered  or  as  a  Systems  Analyst. 
Extensive  travel  on  assignments 
to  various  client  sites  within  the 
U.S.  is  required.  Competitive 
salary  offered.  Apply  by  resume 
to  Barbara  Garner,  Centriclty, 
Inc  ,  700  Galleria  Pkwy.,  Suite 
450,  Atlanta,  GA  30339;  Attn; 
Job  BG. 


IT  CAREERS 


Sr.  Software  Eng.  (mult,  openings): 
Designs,  develops  and  implements 
computer  s/w  systems  applying 
principles  and  techniques  of 
comp,  science,  engineering  and 
mathematical  analysis.  Analyzes 
s/w  requirements  to  determine 
feasibility  of  design  and  directs 
s/w  system  testing  procedures, 
programming  and  documentation. 
Work  requires  frequent  travel 
and  relocation.  Must  have  two 
yrs.  as  soft.  eng.  or  comp.  prof, 
req'd  incl.  two  years  of  demonstra¬ 
ble,  professional  exp.  with;  Ora¬ 
cle  RDBMS  and  related  soft¬ 
ware,  QOA  and  OOAD,  MQ 
Series,  Rational  Rosa,  Java, 
JSP,  JAVA  Script,  HTML,  Visual 
Age  and  Websphere.  M.S.  degree 
or  foreign  equivalent  will  accept 
B.S.  degree  plus  5  yrs  of  progres¬ 
sive  exp.  in  the  profession  in  lieu 
of  M.S.  degree.  Degree  in  one  of 
several  ltd.  fields:  computer 
sci./appls,  Eng.,  Math,  Physics, 
Chemistry.  Salary  $65,000/year, 
F/T.  Please  submit  resumes  to: 
Mgr.,  Armstrong  Cty  Team  PA 
Careerlink,  1270  North  Water 
St.,  PO  Box  759,  Kittanning,  PA 
1 6201 .  Reference  Job  Order  No. 
WEB244541 . 


Sr.  IT  Support  Specialist.  Duties: 
Provide  secure  environ,  to  sup¬ 
port  IT  Eng.  Dept.  Analyze  & 
interpret  data  proc.  requirements 
using  Project  Mgmt.  &  Pro/Engi¬ 
neer  to  plan  system  which  will 
determine  necessary  capabalities 
for  co.  Define  IT  eng.  strategies 
in  collab.  w/affil.  plants  worldwide. 
Eval.  factors  incl.  no.  of  depts.  to 
be  serviced,  reporting  formats, 
time  &  cost  constraints  &  security 
&  access  restrictions  to  deter¬ 
mine  hardware  configs.  Analyze 
info  to  determine,  recommend  & 
plan  the  equip.  &  software  to 
handle  work  load.  Resp.  for 
supporting  &  maintaining  equip. 
&  the  systems  hardware  incl. 
servers,  workstations,  network, 
software  &  appls.  using  Pro / 
Engineer  &  Oracle.  Requires: 
B.S.  (or  foreign  equiv.)  in  Comp. 
Sci.,  Eng.  or  related  field  &  5  yrs. 
■exp.  in  the  job  offered  or  5 
yrs.  exp.  as  a  Mgr.  or  Hardware 
Specialist.  EOE  40  hrs./wk.;  8:00 
a.m.  to  5:00  p.m.  Send  resume 
(no  calls)  to:  Steve  Ott,  ZF 
Batavia,  LLC,  1981  Front  Wheel 
Dr.,  Batavia,  OH  45103. 


Product  Development  Engineer 

(multiple  openings)  -  Under 
close  supervision  of,  and  receiv¬ 
ing  instructions  from,  the  project 
management  authority,  assist  in 
all  of  the  following  tasks:  support 
automotive  body  structures  for 
validating  system  design  speci¬ 
fication  requirements;  design 
and  develop  experiments  to  test 
various  components  for  reliability, 
durability  and  performance  in  a 
variety  of  conditions  encoun¬ 
tered  in  normal  operation  using 
IDEAS,  MSC  NATRAN,  Hyper- 
MESH  and  CAE;  and  design, 
analyze  and  optimize  structural 
solutions  tests  for  various  auto 
components  including  high  mill- 
age  degradation,  a  special  test¬ 
ing  process  for  sheets  metal  and 
spot  welds.  Req's.  Bach's  in 
Mech  Engg.  or  its  foreign  ed. 
equiv.  +  1  yr  exp.  in  a  related 
occup.  Send  resume  to  J. 
Brigham,  Onsite  Companies, 
Inc.,  6992  Columbia  Gateway 
Dr.,  Columbia,  MD  21046.  Attn: 
G 14002. 


Open  Sr.  Network  Engineer 


position  in  our  Pasadena,  CA 


office.  Please  mail  resume  to: 


Corp.  HR,  Earthlink,  Inc.,  1375 


Peachtree  St.,  Level  A,  Atlanta, 


GA  30309;  Attn:  Job  IB  (no 


phone  calls  please)  EOE 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  design,  develop,  test, 
maintain  and  support  various 
financial  and  business  manage¬ 
ment  applications  in  a  client/ 
server  object-oriented  environ¬ 
ment  using  Sybase,  Oracle, 
MFC,  Crystal  Reports,  ODBC, 
C++,  Visual  C++  and  Transact 
SQL  on  UNIX  and  Windows 
2000  operating  systems.  Require: 
Master's  degree  in  Computer 
Science/Engineering,  Business 
Administration,  or  closely  related 
field  with  two  years  of  experience 
in  the  job  offered.  Extensive  travel 
on  assignment  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered,  send 
resume  to:  Roz  L.  Alford,  Principal, 
ASAP  Staffing  LLC,  3885 
Holcomb  Bridge  Rd.,  Norcross, 
GA  30092;  Attn:  Job  AB. 


A  33-year  record  of  quality 
people  like  you. 

We  know  you’re  in  demand.  So 
demand  the  best  environment 
for  your  growth:  IT  consulting 
with  an  international  leader. 
We’re  everywhere  business  and 
industry  are,  with  offices  across 
the  country.  So  you’ve  always 
got  a  new  set  of  challenges, 
with  total  support.  We’re  currently 
recruiting  the  following  profes¬ 
sionals:  Programmers,  Program¬ 
mer/Analysts,  Application  Devel¬ 
opment  Specialists,  Database 
Analysts,  Business  Analysts, 
Computer  Specialists,  Operations 
Specialists,  Network  Administra¬ 
tor/Specialists,  Software  Engineers 
and  Lead  Analyst/Programmers. 
Apply  online  at  www.ajilon.com. 

An  Equal  Opportunity  Employer 

Ajilon 

www.ajilon.com 


Agree Ya  Solutions  is  hiring  all 
levels  of  Programmer/Analysts 
and  Software  Engineers.  Sr. 
Software  Engineers  req  a  Bach 
deg/equiv  &  5  yrs  exp  or  Master 
deg/equiv  &  3  yrs  exp.  Send 
resumes  to  7509  Madison  Avenue, 
#103,  Sacramento,  CA  95610- 
7464.  Will  be  assigned  to  client- 
sites  nationwide. 


COMPUTER 

Aces  International,  Inc.  is  hiring 
Programmer  Analysts,  Software 
Enggs,  Financial  Analysts  and 
Market  Research  Analysts.  For 
some  positions  candidates 
maybe  placed  on  client  sites 
nation-wide.  Send  resumes  to 
Aces  International,  Inc.,  980 
Central  Expressway,  Santa 
Clara,  CA-95050,  email 
hr@acesintl.com. 


TEALEAF  TECHNOLOGY.  Inc., 
San  Francisco,  CA,  web  applica¬ 
tion  monitoring  software  company 
is  hiring: 

•  Programmer  Analyst 
For  travel  to  various  locations, 
including  San  Francisco  and 
Sacramento  Areas  REQ:  B.S.  in 
Engineering,  Math,  CS  or  related, 
+  2  yrs  of  exper. 

To  apply,  send  resume  to 
careers  ®  tealeaf.com 
or  fax  to41 5-495-801 8.  EOE. 


IT  dev/implementation  co.  seeks 
IT  professionals  with  industry 
exp.  in  at  least  4  of  the  following: 
SAS,  C,  UNIX,  IBM  ES  9672- 
R44,  WIPRO  6830V,  IMS-DC, 
JHS,  CA1 1  .etc.  and  with  extensive 
SEI-CMM  LEVEL  5  Key  Prac¬ 
tices  exp.  Some  positions  require 
MS  or  equiv.  CS,  Engg  (any), 
Math,  or  rel.  field  while  others 
require  BS  or  equiv.  as  above. 
Pay  matching  with  exp.  Foreign 
educ.  equiv  accepted.  Travel/ 
relocation  reqd.  Res.  &  salary 
expectations  to  tech  Affinity,  Inc. 
3111  Dr.  ML  King  Jr.  Blvd.,  Ste 
100,  Tampa,  FL  33607 


McNaughton-McKay  Electric 
Company  is  seeking  an  experi¬ 
enced  Technical  Project  Lead 
to  join  our  team  in  support  of 
the  business  system.  Interested 
applicants  please  respond  by 
submitting  a  detailed  resume 
and  2  reference  letters  by  regular 
mail  to:  1357  E.  Lincoln  Ave., 
Madison  Heights,  Ml  48071, 
Attn:  T.  Krucki".  All  information 
must  be  post  marked  by  May 
31 , 2002.  No  phone  calls  please. 
E.O.E. 


PROGRAMMER/ANALYST  to 
analyze,  design,  develop,  imple¬ 
ment  and  support  internet/ 
intranet  based  application  soft¬ 
ware  using  Cold  Fusion,  Java, 
MS  SQL  Server,  JavaScript, 
HTML  and  Oracle  under  Windows 
operating  systems.  Require:  B.S. 
degree  in  Computer  Science/ 
Engineering,  or  a  closely  related 
field  with  one  year  of  experience 
in  the  job  offered  or  as  a  Pro¬ 
grammer.  Extensive  travel  on 
assignments  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered.  Apply 
by  resume  to:  Pishu  Harjani, 
President,  Focus  Software,  Inc., 
22  Perimeter  Center  East,  Suite 
2205,  Atlanta,  GA  30346;  Attn: 
Job  RS. 
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Oracle 


release  in  the  foreseeable  fu¬ 
ture,  OAUG  members  were 
critical  of  the  rapid  pace  of  Or¬ 
acle’s  incremental  lli  upgrades. 

The  new  releases  require  ex¬ 
tensive  testing  and  sometimes 
cause  glitches  in  existing  sys¬ 
tems,  according  to  some  con¬ 
ference  attendees.  Every  re¬ 
lease  of  the  lli  software 
“breaks  the  old  stuff,”  said 
Melanie  Bock,  a  San  Francisco- 
based  Oracle  consultant  who  is 
a  past  president  of  the  OAUG. 

Several  users  also  faulted 
Oracle’s  support.  They  said 
support  workers  don’t  seem  to 
be  communicating  with  Ora¬ 
cle’s  developers  and  often 
aren’t  fully  up  to  speed  on  lli’s 
nuances.  The  amount  of  soft¬ 
ware  patches  that  users  have  to 
install  and  the  time  it  can  take 
to  put  them  in  place  were  also 
sore  points  for  some  users. 

Elaine  Friedman,  a  technical 
analyst  at  Canada’s  National 
Capital  Commission,  said  that 
the  Ottawa-based,  quasi-public 
agency  charged  with  capital 
maintenance  and  beautifica¬ 
tion  halted  an  lli  implementa- 


■ 


All  the  Fixings 

The  steps  Oracle  is  taking 
include  the  following: 

EXTERNAL 

■  An  lli  upgrade  due  next  month 
includes  utilities  that  can  detect 
patches  a  user  needs  to  install. 


■  A  new  template  will  automate 
the  process  of  configuring  lli  to 
handle  business  processes. 


■  Another  utility  is  aimed  at  help¬ 
ing  users  plan  the  steps  they 
need  to  take  during  upgrades. 


INTERNAL 

■  lli  developers  are  using  new 
automated  code  generation  and 
software  testing  tools. 

■  Developers  and  technical  sup¬ 
port  workers  are  meeting  weekly 
to  examine  trends  and  issues. 


tion  last  fall  because  the  patch¬ 
ing  process  was  so  slow. 

Some  problems  took  weeks 
to  fix,  Friedman  said.  She 
added  that  the  commission 
postponed  its  migration  from 
Oracle’s  10.7  financial  applica¬ 
tions  until  this  fall. 

Cliff  Godwin,  senior  vice 
president  of  applications  tech¬ 
nology  at  Oracle,  said  software 
quality  improvements  made  by 
the  company  over  the  past  year 
have  cut  in  half  the  number  of 
patches  that  new  lli  users  typi¬ 
cally  need  to  install.  In  re¬ 
sponse  to  user  demands,  he 
added,  Oracle  also  now  offers 
packs  that  include  multiple 
patches  in  order  to  further  re¬ 
duce  installation  work. 

Oracle’s  remedy  plan  also  in¬ 
cludes  the  formation  of  a  new 
group  to  monitor  internal  qual¬ 


ity  assurance  procedures  and 
the  start  of  weekly  meetings 
between  developers  and  sup¬ 
port  workers.  In  addition,  a 
new  utility  being  built  into  lli 
is  supposed  to  notify  users  of 
patches  they  need  to  install. 

Brussels-based  DHL  World¬ 
wide  Network  NV  in  January 
completed  a  global  migration 
to  lli  from  10.7.  Like  other  early 
adopters  of  lli,  the  delivery 
company  faced  “a  lot  of  issues 
with  quality”  and  was  kept 
busy  testing  patches  that  Ora¬ 
cle  released  to  fix  glitches,  said 
Jeremy  Young,  finance  busi¬ 
ness  process  manager  at  DHL. 

Oracle  appears  to  be  moving 
in  the  right  direction  now,  not¬ 
ed  Young,  who  is  another  past 
president  of  the  OAUG.  “The 
signs  are  there,  but  you  want  to 
see  it  continue,”  he  said.  I 


i 

Users  Unhappy  With  lli  Upgrades 


Underscoring  the  application  up¬ 
grade  and  support  issues  raised 
by  users  at  the  OAUG  conference 
was  the  release  of  survey  results 
by  Boston-based  AMR  Research 
Inc,  showing  a  low  level  of  satis¬ 
faction  with  the  lli  implementation 
process. 

The  survey,  conducted  in  Feb¬ 
ruary,  drew  responses  from  115 
OAUG  members  whose  compa¬ 
nies  have  completed  lli  rollouts. 
Jennifer  Kemmeter,  an  AMR  ana¬ 
lyst,  wouldn’t  disclose  the  per¬ 
centage  of  the  respondents  who 
said  they  were  satisfied  with  the 
upgrade  process.  But  she  said  the 
figure  was  “very  low.” 

Moreover,  Kemmeter  said,  the 
users  that  took  part  reported  that 


they  spent  an  average  of  43% 
more  money  and  39%  more  time 
on  lli  implementations  than  they 
had  expected.  On  the  other  hand, 
she  noted  that  60%  of  the  users 
said  they  were  satisfied  or  better 
with  Oracle  as  a  company.  And 
75%  said  lli  had  improved  their 
software  environment  and  deliv¬ 
ered  business  benefits. 

Oracle  declined  to  comment 
about  the  survey.  But  a  source  at 
the  company  said  it’s  working  to 
help  users  keep  their  lli  upgrades 
from  going  over  budget  and  tak¬ 
ing  more  time  than  scheduled.  For 
example,  Oracle  is  automating  the 
software  regression  testing 
process. 

-  Marc  L.  Songini 
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Privacy 

other  than  what’s  available  on 
the  Marriott  Rewards  Web  site, 
he  must  pay  the  company’s 
special  $20  privacy-policy 
charge  for  a  personal  data  re¬ 
quest.  The  company’s  U.S.  pri¬ 
vacy  policy  doesn’t  include 
this  access  provision. 

That  fee  doesn’t  cover  the 
cost  of  providing  the  data,  said 
Stephanie  Hampton,  a  spokes¬ 
woman  for  the  Bethesda,  Md.- 
based  hotel  chain.  Assembling 
the  information  may  require 
the  help  of  a  systems  analyst, 
and  “you  can  easily  assume 
that  $20  is  a  lot  less  than  what 
they  make  an  hour,”  she  said. 

And  while  the  privacy  bill 
approved  earlier  this  month  by 
the  U.S.  Senate  Committee  on 
Commerce,  Science  and  Trans¬ 
portation  gives  broad  access 
rights  to  citizens  here,  it  would 
let  companies  charge  a  maxi¬ 
mum  of  only  $3  per  request. 
The  bill  has  been  sent  to  the 
Senate  for  a  vote. 

Opponents  say  access  could 
be  costly  for  companies.  A 
study  for  a  technology  trade 


group  last  year  by  Robert 
Hahn,  director  of  the  American 
Enterprise  Institute-Brookings 
Joint  Center  for  Regulatory 
Studies,  estimated  privacy  com¬ 
pliance,  including  access,  at  $9 
billion  to  $36  billion. 

But  privacy  advocates  have 
discounted  that  figure  and  also 
point  to  studies  showing  that 
privacy  fears  are  costing  retail¬ 
ers  billions  in  customer  spend¬ 
ing.  Another  problem  is  defin¬ 
ing  what  is  meant  by  “access” 
to  personally  identifiable  data. 
A  U.S.  Federal  Trade  Commis¬ 
sion  special  committee’s  re¬ 
port  from  2000  raised  many 
questions  without  providing 
clear  answers. 

For  instance,  does  personal¬ 
ly  identifiable  information  in¬ 
clude  clickstream  data,  data 
purchased  by  or  from  third 
parties,  and  inferred  as  well  as 
factual  data  —  information  de¬ 
veloped  about  a  customer  from 
data  that  has  been  collected? 

The  Senate  bill  was  authored 
by  Sen.  Ernest  “Fritz”  Hollings 
(D-S.C.).  If  it  becomes  law,  the 
FTC  would  have  to  enforce  it 
and  answer  those  questions. 

Staples  Inc.,  a  Framingham, 
Mass.-based  office  retailer,  has 
175  of  its  1,400  stores  located  in 


Europe,  and  the  company  is 
complying  with  European 
rules,  as  Marriott  is,  under  the 
a  “safe  harbor”  accord  between 
the  U.S.  and  the  European 
Union. 

Companies  that  sign  up  un¬ 
der  the  agreement  with  Euro¬ 
pean  authorities  post  privacy 
policies  that  are  modeled  after 
Europe’s  privacy  laws. 

Staples  gives  its  European 
and  U.S.  customers  access  to 
personally  identifiable  data. 


Access  Rules 

EUROPE  Customers  have  broad 
rights  to  see  personally  identifi¬ 
able  information  and  make  cor¬ 
rections. 


U.S.  Customers  have  rights  to 
certain  kinds  of  data,  such  as 
credit  reports,  but  not  to  every¬ 
thing  collected  by  firms. 

PROBLEMS  Without  a  central¬ 
ized  database,  complying  with  an 
access  request  can  be  difficult. 

REALITY  European  authorities 
aren’t  enforcing  their  privacy  laws 
-  yet.  U.S.  may  see  privacy  bill 
with  access  requirement,  but  pas¬ 
sage  this  year  is  doubtful. 


The  data  is  available  online, 
but  if  a  customer  seeks  addi¬ 
tional  information,  they  must 
contact  Staples  to  discuss  their 
request,  said  Kristin  Campbell, 
a  senior  vice  president  at  the 
firm  and  assistant  general 
counsel. 

“Some  of  the  [safe  harbor] 
guidelines  are  rather  fluid,” 
she  said.  “The  requirement  is 
that  the  data  provider  has  to 
have  access,  but  it  doesn’t  tell 
us  exactly  what  that  means.” 

One  country  with  a  lot  of  ex¬ 
perience  on  this  issue  is  New 
Zealand.  Its  data  protection 
law  is  about  10  years  old,  and  of 
the  7,000  complaints  it  has  re¬ 
ceived,  about  40%  deal  with 
access  issues. 

But  complaints  against  mul¬ 
tinational  companies  are  few, 
said  Bruce  Slane,  New  Zea¬ 
land’s  privacy  commissioner. 
“We  think  generally  that  large 
multinational  companies  are 
better  managed  and  want  to 
have  fair  information  prac¬ 
tices,”  he  said.  I 


ON  ANOTHER  FRONT 

An  international  body  is  revising  its 
information  security  guidelines. 
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FRANK  HAYES/FRANKLY  SPEAKING 


The  Cost  of  Speed 

DIDJA  SEE  the  story  on  the  front  page  of  last  Monday’s 
USA  Today ?  The  one  with  the  headline  “Companies 
Squander  Billions  on  Tech”?  The  one  that  says  U.S. 
companies  “threw  away”  $130  billion  in  the  past  two 
years  on  unneeded  software  and  systems,  suggests  that 
Y2k  spending  was  a  boondoggle  and  implies  that  everyone  else  in¬ 
volved  in  corporate  IT  decisions,  from  CEOs  down  to  the  propeller 
heads  in  the  trenches,  are  dimwitted  dopes  who  never  get  anything 
right  when  it  comes  to  technology? 

Right  —  as  mama  used  to  say,  it  makes  a  good  story.  But  is  it  true? 


It  surely  sounds  damning.  The  story  talks 
about  a  “spending  spree,”  and  “panic  buying” 
for  Y2k,  and  companies  “burned  by  overspend¬ 
ing.”  And  if  $130  billion  really  was  wasted  over 
two  years,  that’s  about  15%  of  U.S.  corporate  IT 
spending  down  a  rathole  —  and  the  story  claims 
that,  worldwide,  IT  “waste”  is  more  like  20%. 

Is  it  true?  If  it  is,  we  could  reasonably  expect 
every  CIO  to  be  on  the  street  right  now,  and  de¬ 
servedly  so.  Why,  just  by  cutting  out  that  IT 
waste,  we  could  probably  put  this  recession  be¬ 
hind  us,  and  put  a  million  unemployed  people 
back  to  work  right  now! 

But  it’s  baloney.  Sliced  thick  and  served  up 
with  all  the  trimmings,  but  baloney  all  the  same. 

There  is  no  massive  waste,  no  tens  of  billions 
of  IT  dollars  squandered  or  thrown  away.  We 
know  where  the  money  went.  So  do  our  CEOs. 

It  went  to  Web  stores  and  e-commerce,  to  Y2k 
and  B2B,  to  enterprise  applications  and  produc¬ 
tivity-enhancing  systems.  Did  we  spend  more 
than  absolutely  necessary?  Sure  —  everybody’s 
hindsight  is  crystal-clear.  If  we’d  had  years  to 
create  an  e-commerce  infrastructure,  we  could 
have  fine-tuned  every  decision  and  optimized 
everything  for  price. 

But  we  didn’t  have  years.  We  had 
months.  So  we  had  to  make  best 
guesses,  leave  margins  for  error  and 
work  a  little  faster.  We  built  in  more 
capacity  than  absolutely  needed  be¬ 
cause  if  we  didn’t,  we’d  catch  holy 
hell  when  the  system  couldn’t  han¬ 
dle  the  load.  We  bought  products 
with  features  we  didn’t  need  be¬ 
cause  those  products  were  available 
and  we  couldn’t  afford  to  wait. 

There’s  your  “unneeded”  IT 
spending.  We  optimized  for  deliv¬ 
ery  speed,  not  cost,  because  other¬ 


wise,  we’d  have  been  demolished  in  the  elec¬ 
tronic  marketplace. 

Sure,  big  IT  projects  failed  at  Hershey,  Kmart, 
Nike  and  other  companies.  ( USA  Today  counts 
those  in  its  “wasted”  billions.)  We’ve  always 
seen  some  projects  fail,  along  with  some  com¬ 
panies  that  lacked  clear  IT  visions.  The  differ¬ 
ence  now  is  that  far  more  IT  projects  have  di¬ 
rect  importance  to  the  business  —  so  business- 
side  people  demand  much  faster  delivery,  re¬ 
sulting  in  much  greater  risks  and  a  more  direct 
hit  to  the  bottom  line  when  a  project  fails. 

Of  course,  USA  Today  also  counts  the  most 
successful  collection  of  IT  projects  in  history  as 
wasted  spending.  Here’s  the  paper’s  version  of 
Y2k:  “Little  happened,  except  that  corporations 
got  stuck  with  big  tech  bills.”  Of  course,  making 
sure  “little  happened”  was  exactly  what  IT  peo¬ 
ple  were  supposed  to  do.  And  we’d  have  spent  a 
lot  less  on  Y2k  if  we  had  approval  to  start  work 
sooner  and  didn’t  have  to  sprint  at  the  end. 

It’s  all  about  speed.  IT  is  ever  more  critical  to 
the  business,  and  business  changes  ever  more 
rapidly,  so  we’ve  got  to  deliver  the  IT  goods 
ever  more  quickly.  But  the  price  of  that  speed  is 
that  IT  costs  more  —  and  comes 
with  greater  risks. 

That’s  the  real  story  —  the  one 
USA  Today  missed. 

So  if  your  CEO  asks  why  you’re 
“wasting”  so  much  money  on  IT, 
point  out  that  business  needs  create 
short  deadlines,  that  capacity  and 
time-to-market  are  where  the  mon¬ 
ey  goes,  and  that  the  choice  to  opti¬ 
mize  for  cost  or  for  the  business’s 
need  for  speed  is  up  to  him. 

And  remind  him  that  IT  can  come 
fast,  or  good,  or  cheap  —  but  never 
all  three  at  once.  I 
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HELP  DESK  pilot  fish  is  trou¬ 
bleshooting  a  user’s  floppy  disk 
drive  that  makes  a  clicking 
sound  and  won’t  read  any  disks. 
Mystery  is  solved  when  fish 
spots  a  floppy  that’s  missing  its 
metal  sleeve.  Is  that  the  one  you 
were  using?  fish  asks.  “Yes.” 
user  says.  “And  now  it  won’t 
work  anywhere  else  either.” 

USER  restoring  a  backup  from 
seven  floppies  can’t  get  past 
Disk  6.  When  he  puts  in  the  final 
floppy,  the  program  keeps  flash¬ 
ing  “Insert  Disk  7."  A  quick  check 
by  IT  pilot  fish  reveals  that  last 
disk  is  No.  8.  Where’s  Disk  7? 
fish  asks  user.  “Well,  usually  it 
only  wants  seven  disks,  but  last 
night  it  wanted  another  disk,” 
user  explains.  “I  didn’t  have  one, 
so  I  just  left  the  last  disk  in  and 
let  it  keep  running.  It  seemed  to 
finish  OK,  though.” 

IT  DIRECTOR’S  laptop  won’t 
let  her  save  changes  to  her  im¬ 
portant  presentation  to  a  floppy 
disk.  She  goes  from  PC  to  PC  in 


the  department  and  quickly  con¬ 
cludes  that  all  the  floppy  drives 
in  the  IT  shop  are  bad.  Furious, 
she  calls  hardware  support  pilot 
fish  on  the  carpet.  Fish  examines 
the  floppy  -  and  solves  the  prob¬ 
lem  by  sliding  the  write-enabled 
tab  closed. 

PANICKY  secretary  turns  up  at 
support  pilot  fish’s  door  clutch¬ 
ing  a  damaged  floppy  disk.  It 
can’t  be  read,  and  the  document 
is  too  long  to  retype,  and  it  must 
go  out  that  afternoon,  she  wails. 
Fish  rescues  the  file,  then  asks 
what  happened.  “The  boss 
asked  for  yet  another  change,” 
she  admits.  “And  out  of  frustra¬ 
tion,  I  drop-kicked  the  floppy 
across  the  room.” 

Kick  a  story  my  way:  sharky® 
computerworld.com.  You 

score  a  sharp  Shark  shirt  if  we 
use  your  true  tale  of  IT  life.  And 
check  out  the  daily  feed,  browse 
the  Sharkives  and  sign  up  for 
Shark  Tank  home  delivery  at 
computerworld.  com/sharky. 


The  5th  Wave 


“Okay  people,  remember -use  your  project 
management  software.  It's  customizable, 
so  those  of  you  collecting 'juice’  will  use 
a  slightly  different  entry  from  those  o£ 
you  doin^  6haVj2dowrv=>  or  fencing  stolen, 
^rocds." 


(©server 


Omaha  Steaks’ online  sales  have  soared  150%  over  the  last  3  years.  And  with  20%  of  their  sales  now 
conducted  over  the  Web,  they  clearly  required  a  highly  available  server.  Since  deployment,  their  IBM 
(©server  iSeries™  has  been  rock  solid  (2  years,  no  unplanned  downtime).  And  that's  a  job  well  done. 
For  a  complimentary  consultation  with  an  iSeries  specialist,  visit  ibm.com/eserver/omaha,  or  call 
1  800  426-7777  and  mention  priority  code  102AG006. 


(€)  /><&'*?$$  is  i 'be.  Phy 


All  numbers  and  results  reported  are  from  customer  sources.  Results  obtained  in  other  customer  environments  will  vary.  IBM.  the 
trademarks  of  International  Business  Machines  Corporation  in  the  United  States  andfor  other  countries.  Other  company,  product  and  serv 


Oracle9/  JDeveloper 

Web  Services 


“Oracle9i  JDeveloper  isn’t  just  a 
Java  coding  tool;  it’s  intended  to 
act  as  an  on-ramp  to  the  Web 
services  journey.” 

week 

THE  ENTERPRISE  NEWSWEEKLY 


“Oracle9i  JDeveloper: 
An  alternative  to  .NET.” 


“While  Oracle9i  aims  to  satisfy  a 
number  of  scenarios,  the  new 
JDeveloper  release  strongly 
supports  Oracle’s  larger  strategic 
course  toward  Web  services.” 

inte,l'M$rise 


“JDeveloper  marks  the  start  of  a 
new  push  for  Oracle...  Oracle  is 
well  positioned  to  provide  a  stack 
for  Web  services.” 

InfoWorid 


JDeveloper  makes  building 
web  services  fast  and  easy. 

Buy  it  for  $995. 


oracle.com/ad 
or  call  1.800.633.1072 
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